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"], 0x2080}}, {{&(0x7f00000068c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x3, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0xd7}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006940)="81420ef65af07c275f45aa35eacba85c2bc39d4f10b61b7cca", 0x19}], 0x1, &(0x7f00000069c0)=[{0x70, 0x6, 0x40, "3d74995cb675690f707761ca14016c62e850881d0d9435b6af98a12ce40e954b651dec8b77fb46a05809b7197c24f69123317ff5f928bce49600939622afb0a0861eece6173d58ffc5f805c7d92ef858966bac9bd4ef4698c5d3ab"}, {0x110, 0x114, 0x8000, "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"}, {0x68, 0xff, 0x56, "b35de7bb68e2a4205186fe5846b607c1912081bce2e7a9f509e0972ef2354726152735bfe4e52f004b4bc30bf50a1b61efdae7b6b79f42cc09c1cd56d72fa5d6b841751b41a500318f2d9e1af1e0d4dbe1f5249b85"}, {0x28, 0x10f, 0x10001, "468ba1af6e4be6044362f9301b50021f66"}, {0x20, 0x10c, 0x1, "67df5bdcd3f977bc0557fd0203"}, {0x1010, 0x109, 0x1, "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"}], 0x1240}}], 0x4, 0x4000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r7, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000000380)=""/164) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000240)=0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x48000000}, 0x0) 22:22:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x0) 22:22:14 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) ptrace$cont(0x18, r1, 0x8, 0x9) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000100)={0x6, 'geneve0\x00', {0x3}, 0x4}) 22:22:14 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000011008108000069225488b60309000e001b00400000ff05000500"/46, 0x2e}, {&(0x7f00000000c0)="6268252fe8e6c6df83b76270f1726a03c24226df0a59deb241f49da48e0346fb8c52fd2b17830dabdd0240a598686e87233addf457abcb786cdddf6baedfdbd18bbe59874a6786cb390675b53c8ab3d49bdf90725fa1411526bbc46b1c2e2dc5342194a71cc140e7dd4e8006833b761e10534bdc228644c547f8e72861333cfc9571e1b3096266f31b6c53905557776da1dfeb375502fcc788ebf39b717121038e4cb3d0c7e9c337494fe7a0f397f4f020115b57998a788fe542a0cc745ddc4b3a9b09d2a4c9cd83efdc5164e882742abc", 0xd1}], 0x2}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$getown(r1, 0x9) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 22:22:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x0) 22:22:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 22:22:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2766.977936][T29986] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:22:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:22:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x0) 22:22:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f908]}) 22:22:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2a00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd9541af2e094072c385c858799f94d8208700a1ff329eed38aec4714c46f502aa4e86cc1e7f5b1bd37a59751b3691c1b8460422cdb2c03662281ce08f50a8c24e5c8f960f5326be45099447d2bf61eb95b860bb71669f06a4448e8b", 0x2e}], 0x42}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0) 22:22:15 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0xfffffffffffffef8) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xb0000, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) accept4$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @bcast, @rose, @remote, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48, 0x800) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) accept4$rose(r5, &(0x7f00000003c0)=@full={0xb, @remote, @null, 0x0, [@default, @rose, @netrom, @rose, @netrom]}, &(0x7f00000002c0)=0x40, 0x80800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 22:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x68000000}, 0x0) 22:22:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 22:22:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:22:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 22:22:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f909]}) 22:22:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 22:22:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:22:16 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffd75, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) setxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) pwrite64(r0, &(0x7f00000001c0)="567f1b54de9f7ab1f8d61f57515122af1e3ddd1867b81753e2a521ac01d676863c2e6f535902a466a96891", 0x2b, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 22:22:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:22:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 22:22:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 22:22:16 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xed7}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000001040)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="08002cbd7000ffdbdf250100000014000200fe800000000000000000000000000000000000000007616d5f736c9876655f300000000014000200fe88000000000000000000000000000114000600697036746e6c3000000000000000000014004300543e704a684336893f62030a27151f0108000400e000000114000200fe8000000000000000000000000023aa2800070073797374656d5f753a6f626aff63745f723a6d6f7573655f6465766963655f743a733000"], 0xbc}, 0x1, 0x0, 0x0, 0x40480c4}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x40000) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 2768.371662][T30552] validate_nla: 25 callbacks suppressed [ 2768.371672][T30552] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90b]}) [ 2768.494452][T30554] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2768.504221][T30556] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 22:22:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 22:22:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:22:16 executing program 1: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000880)=""/4096) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000500)) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000140)=""/21, 0x15}], 0x2, &(0x7f00000003c0)=""/121, 0x79}, 0x20) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9e0000, 0x2, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091c, 0x9, [], @p_u32=&(0x7f0000000040)}}) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x2, 0x2, 0x2}}, 0x27) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2768.709684][T30769] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2768.847677][T30779] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 22:22:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f026]}) [ 2768.984925][T30822] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2769.077393][T30827] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 22:22:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001680)='/dev/zero\x00', 0x80000, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000016c0)) r1 = socket$kcm(0x10, 0x2, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vhci\x00', 0x357000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001700)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) getsockname$tipc(r2, &(0x7f0000001740)=@name, &(0x7f0000001780)=0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x3b) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000300)={0x1f, 0xcb9}) fchmod(r0, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x0, 0x8, 0x4, 0x342fb5e2f54e172d, 0xfffffff9, {0x77359400}, {0x3, 0xc, 0x1, 0x6, 0x5, 0x4, "9fccb6ed"}, 0x8001, 0x4, @offset=0x5, 0x4, 0x0, 0xffffffffffffffff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/hwrng\x00', 0x200100, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000001600)=0x7) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f00000002c0)) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="bb1174e378aef7038d239a1bc50f4aa9d2d36550ddc0484a0fbb6593d117deb684e59d93", 0x24}, {&(0x7f00000000c0)="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", 0xfa}], 0x2, &(0x7f0000000380)=[{0xe8, 0x88, 0x1, "c43e2a36c718e26b4fefbd0cef0edb0012927dcd5ec80ffa4eca35aa5f44f4d646ceb6a8683e0cdd3d460c0f1aaa76c44bf20a0c26f80dfe3d0aecdb4e4adda5668e848921163c69f4fbf579e155a77c5406a50d858a85a71766db8a9d0c34e0ee7c940d2e5ba2703f83a7840d11839e1ad5321b40ccf1026fe8bbe9d272fcfc1a354ead8f5ead57a22b9aecee7219f165f074959a2c93dae2b676602e4c63129912509a95ce1a139969a64f1962964288ad58c949f287a2764da8484a51d38311c4f4d8b8239f813c463fbc0a4f1a7ce2e55be28c"}, {0x20, 0x10e, 0x1, "535d2155ae58a4276655dfa36b8b7f1c"}, {0xf0, 0x10d, 0xeaf, "0651642f6d7ea6377d6f363800368d16da0676505d6f4ec2df2cc1298c91a8079add83300c3ec08612ce42c627d2dda9dbc0fb02df2b8be0ec03e1ca69a62ae0bac16e1ec66f5c03b956484dc6526e2062bb5cea74221d3274366a7a3ef07e6ef3e2b31202ecf3396c60d1a0342b28c4b8235e2ea1d643d331a8e87e4d91a9035b75bef18966ba625986d17f62a1582a3134cc4570e4dd0a3c4dab2e5581a394611faef5ce43152dea15d8aa1fea47fd0ce98b3235a75cd49162bfe17ee99e506ad4ee80fe3597c8bd4fed3fd3a69c2c59187a40bd919859c4f96bf573a5"}, {0x1010, 0x105, 0xe9, "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"}], 0x1208}, 0xc880) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 22:22:17 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d0200000fe8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) [ 2769.293753][T31004] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 22:22:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x27}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x42}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) 22:22:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f040]}) [ 2769.563451][T31118] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2769.634133][T31120] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TCXONC(r1, 0x540a, 0x2) 22:22:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 22:22:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f041]}) 22:22:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) 22:22:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x10000) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x44, @dev={0xfe, 0x80, [], 0x35}, 0x3}}, 0x24) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 22:22:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TCXONC(r1, 0x540a, 0x2) 22:22:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) 22:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) 22:22:18 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000cab000)=0xc) r6 = dup2(r4, 0xffffffffffffffff) write$P9_RRENAME(r6, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000000c0)=0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:18 executing program 2: syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x20800) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x842, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x20000000, 0x80000001, 0x0, 'queue0\x00', 0x3}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000200)="efc20760a3726656ecc610444e1df8e28f9bca6b0fd13017cfbc44e2cfee768530aa5c7790df518f2d8e3b36e8337fb22f5c4439b53fdb5bdc47c67a49102ab2cef1c802cc850b7ce841e4e498543f87a0e2db2a6ffed3e77525a8a7c73fb6634548ef50a30683c55513c231aeac3adc458afa7735eef71109781d70435928abf50224ccfd", &(0x7f00000002c0)=""/33}, 0x20) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x544, 0x4) 22:22:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) 22:22:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 22:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f043]}) 22:22:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TCXONC(r1, 0x540a, 0x2) 22:22:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0xc3a8829026de9bfa, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @remote, @netrom, @netrom, @rose, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 22:22:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 22:22:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) 22:22:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 22:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f044]}) 22:22:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 22:22:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x82c01, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@l2={0x1f, 0x2, @any, 0x3f, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="1f7a8cea679e05c139c5a10b0b26bf8f56cf5a94813597eae0b6d1fd0f50ba5738cbe4beb8f4be3a39773f4d626c1eb5722497e22d9da25a", 0x38}, {&(0x7f0000000180)="f2ebb345035e", 0x6}, {&(0x7f00000001c0)="ac007ce57eabb8351d9c25122ce386d0dacf5b1d8de333f451d8c5dc5dea9c2a60fec9ce5ec26792c1594c5e39c54c88071fc5c2dab0643d24640ba838c71e1edfcb87c835", 0x45}, {&(0x7f0000000240)="b2da999f81045bda5204e9e08cc84cf7ad552266e21ecae152ad97ae17602a61e20d56bd42e26c82b6ce6b5ee79ce96cce2ce3389b79de99cf4f715b13ca0fdb0939fa16f13f2a56169963984e2f0f57111912a91d8a5a2ba212c3309f32713aea0b1c92416cf14094d947f333ae2ab646cdba7bd7a7253c7e24841341fef5f771430ec7c63c8544ff3d9570c5248f85d0678ea4ecc35c82e47df5ad8d833e28b944c807179a6ca5e7a03df88c91358cdb6b72f85e5d68aec5f7b597440e45f5ddc83253a39b8f61448ccf67a5e6", 0xce}], 0x4, &(0x7f00000003c0)=[{0x90, 0x109, 0x502, "31cd7ef298745276a657f96e69cc53761e323c215c62be39902c134ad923bd33cc247457432688cb77007e304f38796695db8bca7fc6f6e2c79d2a1a6baa78d52e52659ec3e4487efba95be228b7665319d93bff598e145f6f87349f37da30321b9d9b4a3088c96bd910d441f8443c0a337d170e049026dc1380"}], 0x90}, 0x40) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 22:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 22:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 22:22:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f046]}) 22:22:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="8303c951f7393f75e074329c2a6554a9c0207ec3b4c81f81815364f4661571396a4cd264fa0e5711", 0x28}, {&(0x7f0000000380)="46c4a8eac5e30f230d2e69f29fddc6341f721d67d2047823f8a08632213327f0f30d5a9251d22ab7cb82e201d7999e0860a6f1d9a4c1764632e0f67d0809b1b9d61d501e84b42fbe609dbd46c784c3faf3a6484412709862e5d61b925f528a3fa2d87e19c2bed4588d727d769248a6c6cee2e97651a2344a9ab5a68907786a8e", 0x80}, {&(0x7f0000000400)="e4a2b354d6f931d9e583ae5d4d4321d36c2d462111878cf54f4e415a0473c1624a7132410b033d2a67a09aad06c1f5b0b0052bd84b38de6fc1b3d1af65941d9be6213d5516123eaaf7d69f33", 0x4c}, {&(0x7f0000000240)="087ebff997dd7290dd796ebf952ee9b9e9768fa5ac3117c119ba9082417608d945c693395b369934f70bc679145005cfaffe", 0x32}, {&(0x7f00000002c0)="ae11829409312e1395b9fb9296", 0xd}, {&(0x7f0000000480)="e291d64553423171e4a37864005fa3efc9807b1ba2412f49e70d44b99f7be073c0daddb192a1310e170cb1283ede05c847d6a46dc6413b695daf8f340648085702fe003d329ead228eda4f95df1e994f40a520169dac12d11ae7c204e10bc045743102d31a7c897d48983e3cc441", 0x6e}, {&(0x7f0000000500)="5afcb45c60ebc9e900b6", 0xa}, {&(0x7f00000006c0)="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", 0x1000}], 0x8, &(0x7f00000016c0)=[{0xf0, 0x101, 0x5, "bfb9efc0932d06f28c97f908be27dac6d8f6f8d18653ee34ab2fa6b3bd8c69506ab5c826efa4203a1360901aba50a3dde9b4df0b5ef47b348451c74d896a0147faba864a17c648ccd3c3fec35726614c4acac2512cbb4fe68c0808ae5d2a43c5fde3b08801807f55a5d97e18fbbfe26053d8b59ee5ceb0cabe79e55782ddeb793876ee5adc72a3affd2bcd97bb853d51815e6bcd049cf6aacfcc1ddf02b72bdaa82a0f866de415d97f6f49b56d37eb7fb7bdf43ba77ba4a8c2a537676ec9b33cd64258314ef5b974f4549a57618e5e8283578c6d8c761a12a1506e51ac"}, {0x30, 0x0, 0x9, "6feeffe86bbb5f05f3215b8c256772a2a9c8a721ad049368dac9b1"}, {0x58, 0x118, 0x81, "eaba50a06951d821397e29a409fe4e027c649083198361b1bfe49b4f47b662b9a9e4ce78e7857014d191dd04390b2db953377f8b8bbc19d1fbebde11499763bc4ebd362c"}, {0xf0, 0x103, 0x1, "d6aaa7c6d7e522867740728fe2d35add27a261c4c87014f2ff7ee9fac4e24111e39bc073ac9c8b3077a830c9994c5a5d676146567a57a7abe5d876435e93f274e452a460415cd958609e5b4e4bda02c31c90419137c738b09c2cdbf2b974f07ea08098520d32634a36c9c3c3a6675be3cc5a3713d5a694a3e6de0a91406da0a2d630e48cc9f584090509777f191dfa72244cd0a4f8aa52f1c65c7fa1e2a26cb6a2cf41f703deab1be080ef2f2f8bf0c6db63974cbdcd125dec29b8bce38cf4089dc6207b9b5e1cdc50fc668201e0e4aaa144dde901e4eb218c7df553c9"}], 0x268}, 0x20000001) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000100)=0x848) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x14, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 22:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f048]}) 22:22:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x9) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x640, 0x4b0, 0x556, 0x360, 0xfb0f, 0x3, 0x8, 0x1, {0x874, 0x3f}, {0x4, 0xffffffff}, {0x8, 0x8}, {0x6, 0x400}, 0x1, 0x40, 0x6, 0x3b, 0x0, 0x2, 0x6, 0x9, 0x85, 0xe8, 0x2, 0x0, 0xa, 0x4, 0x2, 0xc}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:19 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 22:22:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x2) 22:22:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 22:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x3) 22:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 22:22:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4) 22:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) 22:22:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f06f]}) 22:22:20 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x5) 22:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 22:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 22:22:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6) 22:22:20 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x208202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x7f, 0x6, 0x4c, 0x0, 0x0, 0x81, 0x2c, 0x7, 0xc0, 0x89, 0x0, 0x5, 0x0, 0x9, 0x3, 0x2, 0x6, 0x3, 0x7, [], 0x20}) r3 = syz_open_dev$mice(&(0x7f0000003800)='/dev/input/mice\x00', 0x0, 0x2a100) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000038c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000d9f0c940af9cef06b5b38b9d2e000307020a0000000000000000000000020c000640fffffffffffff80108000540007400060c00024000200000000000040c000240000000dfffffff061828b4cd4b33e23bfb71dce562e95337236b169f"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r6, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r7 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r7, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) 22:22:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 22:22:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7) 22:22:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 22:22:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) 22:22:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f070]}) 22:22:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xa) 22:22:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 22:22:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) [ 2773.878890][T32516] validate_nla: 29 callbacks suppressed [ 2773.878901][T32516] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) 22:22:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f048]}) 22:22:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xc) [ 2774.124957][T32527] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xe) 22:22:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) prctl$PR_GET_SECCOMP(0x15) 22:22:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}, 0x50}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = getpid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r11, r10, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002940)='/dev/nullb0\x00', 0x44480, 0x0) r15 = getpgrp(0x0) setpriority(0x0, r15, 0xffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002980)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002a80)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r18, r17, 0x0) r19 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r19, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r20 = accept4$ax25(r19, &(0x7f0000002ac0)={{0x3, @rose}, [@null, @bcast, @default, @null, @rose, @bcast, @bcast, @default]}, &(0x7f0000002b40)=0x48, 0x0) r21 = openat$ion(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/ion\x00', 0x141000, 0x0) sendmsg$netlink(r1, &(0x7f0000002cc0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)={0x30, 0x27, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x15, 0x0, 0x0, @ipv4=@loopback}, @generic="49cdc5458e33d655c2e9e910a872be3734cb81a6ad214f02"]}, 0x30}, {&(0x7f0000000100)={0x130, 0x30, 0x10, 0x70bd27, 0x25dfdbfd, "", [@generic="492ca578d3d9d01664c2031a3bfb16666350b6d755254f162082dbc5903fc12473177617715473ca881a34ec896e947a982c1ed943f00316a84986e0fd3fcdcb32d08fc8d7dcb363fc3ae93c4e4d81135244383078f96cf09e17421db7e640dbe470f0b3c353f499993a3139b47e81926b9e2da07e77762fc6aeb323061ccf20fdd6b98eb60eb60ef322f936515f884fcc9a3a584ae20ab2a80e949a3842e72739c425b7c4315e6a2f3b0b2cbcf11094320fd7045c65e5f3c6f9f3db8f0dc972e032e29daa4930687990b39df4ae", @generic="78934456bdd297c82402bd613394e7aeaf331c042d233e7991c6bddf2ccd6fe8fbe80cbd5faa066f67c34222c54e2014845580ec89ce89e3c3775aea8b54d9c95de106688547f382fd4b15d519386f14b2b3"]}, 0x130}, {&(0x7f0000000380)={0x208c, 0x40, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1004, 0x19, 0x0, 0x1, [@generic="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"]}, @generic="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", @typed={0xc, 0x4, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@loopback}, @generic="7777e9bbf91269ef5af3e36f51aa9c98c514cafa2cde", @generic="f8f3756e27b6f5992bb4abf33c03c6dfc6e1eb5df2e9add7c90ca99cd166d3e8d784ba385b68ffcca1e236249018c69cf59a04668cd88e275cc8ebaa03d6eaf5"]}, 0x208c}, {&(0x7f0000002440)={0x4e4, 0x14, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x10, 0x85, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xf53}]}, @nested={0x22a, 0x39, 0x0, 0x1, [@generic="de63a69128c8e2daf7c49a680bd6662054da521ca181336824b905b40b3ac4e5cc384a1a30558866ae53eb919f4fdb0c37c610ef32ab9fc38d828505018261a87696ee1a1b9b2eb04428ad5de95ffeada559b4d5f23da09d0e0be76eb7a896a85b927cb8f1e022b000da5bb5c4be069e1eadeebe7caafd071977b38921b08a208db3253fb682f612f16e0e2504352a441cbfb0", @generic="a79a795e9618d5d7657f64c5141e3ea5484b7d15a496100747c12c22b62dfba4e8a0685675e77bd3bd6534d1a282c73aab17a033ea240f09b513e0fe5f7894d4560be5d4205ffa9be77d9e55800065a3cf8b91491bc29933e84e93911e8dc79461044fa94a92e6b66e87f05986ef187fa90a20dfdbfba54c3180711969a42a50a28c3f9e7c6af4e14c61b8c95ff93e9f8ac74d22148ab9b50a43e8a5b17ac284cf2e6d5bb5c065a556cba75d90d14ff979ed01f1d90cdf544cde716a396a77a3eee008837e208816daa80d14", @generic="1ee92658a3fe9a13c12b8f09cbb49b97b223324bea0b248c67ad427c2fa1e3172636feeb060848696d829d92b1f353e5cf19edf73003916186d972cb8d262a25b217f746085f211e541af816184e9d1ad3694d59498e96ad877e307d2535201c5597cb0fba01118041e7886060b00e7d07329f8d0e5aa11aa8356abed33b633f739b37f743c6090cd264f4263b27e7d44e7a5445c9a584c166d5cb85b72137546389fc08b63522210d1336739a5c5cd90ef5ae20961620aa3f6482558f81cbbc55128eee13288d"]}, @generic="8c0bed87ef72fc3e70eed61d5da2237681e9ae541b75a27e2b11e147c44da69e8a9c", @typed={0x2f, 0xb, 0x0, 0x0, @binary="4217fc6132597de6a5a3eb8af6ef362e826030b797fa870edf5e570ad4d8a7f8c853e5e4f11f18d285367b"}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@empty}, @nested={0x106, 0x13, 0x0, 0x1, [@generic="14805d15a58eedf15f337fcc7f631868c65025032d7617cab5fc768a92d1407d3d836a28b4fe5355b4259dde6be4b1ca1a5db043c34322c20a61753b859f67907419240d9b345ed645ec52296e3a692fe60d15968e5b9ce17151c9b93b59668c1c9af76aea60b58b092701ed3be51ddc3c03f2537e9db1f5de724707151d2397852595e10abb262a5f524481b50715a01261f8630e722229a48192ccc522f1aebc1280bb18000a21bf6bf1334204497d10586a1eec1111c750cfb5a62d8ea31b5c76c8796d5e95f84e335945acbc26b1d5e6bd85210de06b4350eef8e2596e5621c2d430f4e911c0df1b8f9d79cd", @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@local}]}, @typed={0x5, 0x8b, 0x0, 0x0, @str='\x00'}, @nested={0x120, 0x82, 0x0, 0x1, [@typed={0x18, 0x7b, 0x0, 0x0, @str='em1cgroupppp0(nodev\x00'}, @generic, @typed={0x8, 0x92, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="272ed98436a9611155102d95e5afb7b8df4f99601c46de541df6b07af0fc6967e208d87439f66af341f8810e3c0a3aa427235c0273730813ac54901df3dd66d3a7b8249b2bc924b3a43cabd5ce60c91118bd1846883b4a593b29187ff48e98a7cdf3acf7402911584a609cc270f68af0a9557a58ac070d6121540f321fdb864250028a68b1100b965f908e08d55dd188e8c677787cc464d4d0adafcae45eba951084ed46f64694be12a1e2c02e1e813f051f627cfc8435f004594cd9291517dab9cd3611db75a2374ea5069b9e4643eb9f5fcf1e9d30c39a2bcc1ebc0639fa8ba1c4992c25be60cc07200c9c6280ee0d5927231f", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x10000}]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x5}]}, 0x4e4}], 0x4, &(0x7f0000002bc0)=[@rights={{0x28, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r3, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x18, 0x1, 0x1, [r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x1c, 0x1, 0x1, [r20, r0, r21]}}], 0xd8, 0x60000080}, 0x42040) [ 2774.356010][T32560] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2774.376996][T32535] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 22:22:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf) [ 2774.488318][T32675] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x1b0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x6a, 0x1ff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x30, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x40bc1424, 0x8, 0x7fff, 0x4d8]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x89]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netfilter\x00') ioctl$TIOCSSERIAL(r4, 0x541e, &(0x7f00000002c0)={0x3, 0x7, 0x49, 0x5, 0x8, 0x7f, 0x7, 0x0, 0x5, 0x0, 0x4, 0x7, 0xfff8, 0x6, &(0x7f00000001c0)=""/198, 0x800, 0x1ff, 0xfffffffffffffffc}) 22:22:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf99800]}) 22:22:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) prctl$PR_GET_SECCOMP(0x15) 22:22:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x10) 22:22:22 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) [ 2774.695452][ T376] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2774.912717][ T380] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2774.942685][ T575] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) dup(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x1b0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x6a, 0x1ff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x30, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x40bc1424, 0x8, 0x7fff, 0x4d8]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x89]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netfilter\x00') ioctl$TIOCSSERIAL(r4, 0x541e, &(0x7f00000002c0)={0x3, 0x7, 0x49, 0x5, 0x8, 0x7f, 0x7, 0x0, 0x5, 0x0, 0x4, 0x7, 0xfff8, 0x6, &(0x7f00000001c0)=""/198, 0x800, 0x1ff, 0xfffffffffffffffc}) 22:22:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) prctl$PR_GET_SECCOMP(0x15) 22:22:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x48) 22:22:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x40c00) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x400, 0x1c7546f4edc826cc, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) [ 2775.151526][ T794] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2775.194934][ T796] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 22:22:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x14, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r4, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r5, 0x9b, "c44c8f3786e6a632bbddad6cebca1d77cc7785ca6ac3fe920773dadde76e04c3c48b7356b756e35f2d9f036456ecda9785d1400969405f466714b735bd1e686c943dd2a6a71cea6c614267802768f260e16eb7b17bec12b2a3c09e2dcf31715f745d4247fbd9565de64d9e36453f1326249a8054be07bfe047430b039a043fa9f8ce8ea44bc6e2cf2f8a57e034c19cd3249f63c2ba10d4c422d720"}, &(0x7f00000001c0)=0xa3) 22:22:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 22:22:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4c) 22:22:23 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x81000) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x4004, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) 22:22:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8000, 0x731181) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x4000) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x5, 0x4, 0x1f, 0x374c, 0xffffffe0, 0x6}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0x10001, 0x6}) 22:22:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x60) 22:22:23 executing program 0: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x99b3450000000000}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000001280)=0x7fffffff, 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000005740)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x4008000) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 22:22:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x2) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000200), &(0x7f0000000540)=""/194, 0xc2}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0xdd7, 0x5, 0x4}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0x1ad}], 0x1}, 0x94) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffff8, 0x18200) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/197) 22:22:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x68) [ 2775.937628][ T1029] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6c) 22:22:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getpeername$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x220c01, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffee6, &(0x7f0000000080)}, 0x4020) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r3}) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x402000) 22:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x74) 22:22:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 22:22:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0xc3d, 0x4, 0x3, 0x103}) 22:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7a) 22:22:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40a142, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4088) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:24 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000380)}], 0x2}, 0x1}], 0x1, 0x1, &(0x7f0000000440)={0x77359400}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf0) 22:22:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0xc3d, 0x4, 0x3, 0x103}) 22:22:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 22:22:24 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000380)}], 0x2}, 0x1}], 0x1, 0x1, &(0x7f0000000440)={0x77359400}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x26b) 22:22:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x648083, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x300) 22:22:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000380)}], 0x2}, 0x1}], 0x1, 0x1, &(0x7f0000000440)={0x77359400}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0xc3d, 0x4, 0x3, 0x103}) 22:22:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x500) 22:22:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x281, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x2, 0xd7e}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000380)}], 0x2}, 0x1}], 0x1, 0x1, &(0x7f0000000440)={0x77359400}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) socket$kcm(0x10, 0x2, 0x0) 22:22:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x600) 22:22:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000380)}], 0x2}, 0x1}], 0x1, 0x1, &(0x7f0000000440)={0x77359400}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) 22:22:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 22:22:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x700) 22:22:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000380)="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") ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="36772de23206aa3ec7ca3ccf9390bec4bceeb18e905c3efcc439dc1a97ff57b116c5e9a0cef7396530f27c55c34e766eae40c3749a1510b8596283147e15a8a2ac6a0739321428f4bb148f0a401c0b7d175acceba6c3b599de52777eb8264ef0f2cddc0a785a0feaab6359b9758c6a88faeb04370957e2daa7d0fe48321f8a3dbe1210e86d985de56c9219d73e40c9363af332a1006108d4e404feabbefa21623278404fe7c8e86ea67368fb", 0xac, 0x0, &(0x7f00000001c0)={r1, r2+10000000}) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) 22:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="6d871585662dd1a4f16c74ead46c27f036e6044bff0f81302681b1488afce0af6706431cabb5dccb46eaf11656411b25050750200bb63c120cf3d4d8257f90ae142697a066dd29457a060fdcd11e5464c3f9605cdded8803e94c656afc1e493aed24238f7355e90ba2bad220b42c9d991af6697cae19ea2885d777fff68bedf569c7d77f8e023a9e567beaab50f6d69eeb0ad9570bf2d961b0f2e10b15818cba93019ae60fcc4955af185ceed65f505c687a6e0908b1b5744d29cb05b72ccb4b32b60ecac0a490e4f0b098cdf55acb14f9ba48feb4fbeb72d611d1200ad32a017d93ee63d02cce1f1948abda2438af0f1ef4e8d93b78b0e115ba16e01aad5b2d876ca65b424713ab10238dc887fc3082a99e2bbd9df5abd229aff5e9dded6d92966d5deb97c6525bd5cb6052aeb29b8fba5fecd16bf80fcf485924005a1bdce8d375c7cda5fdc3f936d48085f95439a2573f22c99a5bdb80d31e4437f4e60fa1af7acaa5809fc3c155623ec63efc9304afc743b96cfbc08526f56238b1f0a840bcffa948befc047561ba397f3837df6b1552d9ac556668cb06b68373fb218c45ffc6d27f9357a5932130d2dc5a1e30e6985fe13b4c51042d62e607fe373449a15aa3961a85e253fffd080dac104f7ccf68894fe7569c47eea197cbd73193d2cd4e56f6be3dccaea46e1b6ae8fc2b0e0060a95e175aa48c8c7b99d5ab9c13d4b3c8b4ff817aaec3a387dbc5ffc030ac4d856f932a251d4163af91f2bf893682d224204fd6187d5937bd862135625c5edac5a6dcb01e55570418f907f11b702905c976213e694c2b6d0b29e22828f8bd615be36098f9dadcdafe4dfb8c3465f3a72a6cc488f66c00cded470918a41cd64687b4c5c9b502cfe94306abc8c21fabfb0bf3e4ef6e49c7076f180bb979cc16ad470d20b4fefa0e116835925effc8e6f392adf2408a7eace2d1169254924f85503f5f23b06c1c5a8ee0869bcffaa4581e0bbbee5591355ca6e73507bc2bd4cd6398c32045336f0bd8d774070438fd45e5963f09deea913a9d698b431bcd0732bdd828ad01b1162e5f974f277f6988e5a201fa8f6ee4a3f93ba5d788ac0aec6f3c2e36be08332f2310cc53e17c2c8c7cdf03933954ceb5013213485ee719544a7b8c6d1f03d203f02f488fa62b098d5ddc6db409acdcec75704cc3d32b2acb8048f9b14f5cb6192e41272109fcd6832544ce023ea2e00d85edfd8b16828964e79d46562a617ea23e2a7de231e70511ae6db4e5a05c90075ea5b4a458597a5dae655af8c54fe77e190f60931965d455b5e9230edbc6b2c2f444e5e9bb8cb3396b3d32b4768d9c66ff7f01154e873ba2f134ca0905a44f2fdeaff01e4cdacb8da908e64e755b5052ba839b4a6db8acd3158a63410cde4238e56c9310f43f3c17695b3870ec5e44525c4154edff3e3d5a4d3184aaa7415956a94f8f6a2b819d9a6f7d01e335dcbfe8d05c22acd6bfe1538ecae0c55043eb862f2018da00f1cca85be469537b8ff016a4a2cadf1f907bec2199d2822c5cd080a85e4bb278a256178dbd85cccc64516879f00a226e703fff7e48fcf933ca0b7abcb51cec20ca2d82d0abb3622c63bf2170347ef04a9fb80b360cbe952c42dfd8d9fcb09e17944364ec74139095beb2e80b769ebc9574caa46277db7b362e9b13eb243943bc415d91b710cc83a7d5a08e9cf292e176eff1a6e096aaf73d6cf99c33ecc70a2ef2a312e879e98fd3bba61f1921b59be70ff97688b4fbca3ee3a417592a9ca603e685c2815c9883f50ad950494da2266ff408220bfb082bb076ddf1352d57e642918ec3aa8c91a85a145eb4e48ad62a392625f6b97a38ef39c7111c8fb8912a680194afb7268e010b84b3f65f07951fde38ee118ef224723165202bb30e2e0dfbed98adaaf9c18084dd72fee040ad7232e22a3bba8fb8153ab0084aa41ec793cf795caf3cad7fbb0166f92e8a8909fd694c56a961d43eedb6fb19c154847dddd864f30387c379dd99fe46cf08218c56c92121a1405a281d3d72aa2759583a72e8c03f4aec5c292bd8ed48c9541346423f92c483d685120b2587e3257c9a7da863ff53d94427ecd559bb0f38c6b0cff8f13404517f9d5e89eb64c304c5cdc50ef5616ca8dce3adc1192562be26babeb50cd83b3aaca46b7349a8cdce952f375eb2222e74603daf7eb84cdddc703643a56d7e337ff87496964caa443d64d5a9230405b3cffe9fc9ad4a8919cca02b03fee315d5a93a1a679ae04dbc9863f2188a5f1a50586cc66211d076b77c6c07fb2d4b3848e5de2fa469c2de331c4d70aad9f3d07c9ab9bc73eef1fa99d9a7c7cb9d52b0cdeb791d72d0ffeced294fa26309ef35f5b28eca27b97da711bd631e639d6e5350159c5946a539697fee2e53d404f91f38ae5fc626f4828edb2418647ba9e227c0be93e9565cf5e367047f71ff670c6d15952e8ae73f6fe4a9545afb8ac8471c0b8ae502bc19183894e834774fe78c3598f0c6932df3479e4dcf7b648a5b83bf05cf1fb75ee3efb5384ee260fd7af6696af34b78271249e93669c02710ae4da3c90f0a0b35ecebb1e910c93841719810901cf8e1036a52f3c95d5e1a719032fe7b3c83fa6a0791efa072f63cd107e568d85606d29e5da5b99d06e60519877e673d5c5375f21388ad67ecaac4ee3ebfdafbf27270d7fe7e219218a6249be4ff19c73514f2acacb50317289238f2349fe75f8411081e7d54b2e34c30e4c24242de4783a4b33d591f9dd2c5cb922b5e8b0600fa0f5edacb82ac67602edcc507e6245bf33e18db61a48ad97f43e0f74a223fd6fc6b12a457c3ef12f18e896f68b46317776a6d789e3a88a5fed8d7d8622c3b1f924e5edf55175e089c0ac0cd1808aed7d94aeeb16b65f2c5a627b5d6721cc30af22c49e336d1377f8d6129a23d0dbbed40785e834d9a2c0fb3043ed074ada17c0d36f6e18ea8fae9b0c1983033a69c620fb9566befce15f78f2b242866f19ea6571f30bb832df4adc72db4f1dddf21a384fb7246e805728832351e63cbaaacdc9e9903f4aa60658ad723ed6a5cbcf359f467080723a9c35ef6ee4f479fe9b3e8c5d5dda0f735cfcfb7549537d54a7590999f79a2feca114b473f486e225d9336b34a07c50dcfd71a3fcdc7c07797d3ecdf29b3c89ca9b5c8b5d0d9b5b9d763be14b0b106cc5c3e6480470e7d4afaf02a5019dee2a344b0186294f2925e9ea915a6429227f5454c45091c3c7447b67c50bcec940319be974d36efdec5c738415d369f71e333f94017de0aa35eb899dc819ddb82a6d91a383cfffe6090afab22511bcb609ef33244806aae8e061790b82c6210f210f9c63ce31e27107fbd693f8d29a3e749b28d1be473f3b580ac26f76ec60f7e14ab39654290272b2fe8474914effd23858fd23cdb485a46ccb16f74bbe6aacef0e05c4975540f655f026d4d0f51d56b7259167321bd105fdf799e65f06cc03fe532e6d641c6f4269c1c3e22cc976b3ed747b86817324d58d0ed8a9bef8a293c1a4dbb36c4c503bb057f5293c65e4f01b247be3bce6fd96bbdb5d39e99d3075c5ebccf7467f6b93a431d315a753c58385b375628fd49475734d53ce52db9597feb46931812119c489aff4db677601bc65f86c526f77b12b5e5abeb93349b4e7bd288bed2c05abe01ed81f870d9edaf80da69c92d2aca886ec94413c299bc8843fed97bd742584287f13253af4b7ac0ef472858ced8eddff528876c4018d7175452afa553c20c28c9289c6f30e99a0ff3b5e6e3b8f3a3b9ca683ca4358a8c4e81701fbbe1efe0872aba7a53ec81f2dd8b5d99db46f937ec4099059fd05dc9a8405a416e0e024de239c6d11844bc109d7bc31226949e6f7be6047c3de2a7c709b126ddb9409b4d51b0237b9a663a898e1de77ab2460ee7b26d18c272ab872d6757255b0a1d32bcbf210ba768bc646eb0a754948b9f2bbb8bf00f8d92c1f315b6fb362648a26f3c92b6799268739977c01e8dba1dad58dfd85cc032d33a96a113e363093c8ddbc855c86fbd0faaa8e54d55472fc6235208693c4be87223c1f3cb92241f1ae28fbfbc1bcc67ed2868db4eaf384425c1e15f94b6cea7afa46b370fc40806bfa605c8cca4bc60c8c977b849fb884cefbd32ccaf8782c179f1cec51cb5cdd01f1fb8f2044a7a145ef65055ecec74a2643b4c9e6e8d424a337f4e91e4ed8523d5be6520476cfe02442cf900b1f2f3e85d5381f50362e5ecc9860bcc8eb226fc786825c69aaace4bc552d2a4eb8e41f9199589f5931d6293ef564ce4587efd44c4289a1e4d1270850f82fd5c98dab03bce2cda421b9f9aa90c582924ae95d93a6acd651fe1280d4eaf5f595f538d42ef8e60d5bc9563a3032d57fdc2b4db6c48f1e1725b9bdedb12c59999e6a2c52b21440afcb533127d425ba87daf41ab1117a32d190c42ac5a7c42e75f1a2b27c97b47172bd716f1f0094d1be2c25b3af6cb5c37d37da82fb61c5e260487fd6e4acd2cb722177eb14fa8f4fd65c6331c83471eb017f0cd9c087b3252df7d45f61f96fd49ea4060ce8e8dd6f8b3d999ebc5f07aa6948e2560bf95fa7ef90e812c15def2aeac441570f46b435d04115504a1993c1f5faabf2bff551db3201abf44980ab56b0cdf9103e6738050de20255baefcdb0975101f4e98b57f70482a70b517d88abd5f865fe6170f566c4ba59df31c1f4ad079bd7be170b2eec969c6a071a800cf093ce105e5a44b30562662117a6bfc3029ad266db9de3e6a68e08be09b551e8effc925c9b3a14ebe4dc6003dc721353f76c6bcd63eb9e6ffc0172e57953f9db7cfe8a5fd5139ed3e35fc1615624d121db754be8d9084587ce692a3e1e8f51379b417abda68628956f5c8176a6077865b077f77dfed6f5e529ce2b21b7b4b496a71b8802d19847a9ef346ab106a1539788d09a75b2c357cb63fd40189d22febb15c052945f4076f3a66b508d38a32d584f77778e8d2d1bd34ba154d0cde5091566eeb0f3141ed7847eb783cd08d14b7296d5d11290c17456ad1a6cb0c9afe123827a8e49d6299cb35cd022c17f6d8ed97efdea7f35ee95c3c4f6dfd9790db7972ccc67c1f61ce3a38f995f879c76e2069f4cfd78bd4316a9d03fb12f052738492b91f4144d04ccd94b64c380adddf1a47281d16373a39b1d0bbaa5edbee03ef6119b9e25b70e8c63f28e4c6c431d0aa6a1defc9cd0aa0e94c979550a45852dc72f374e9213094b2b07aa9467e4d30e6f5ec10b28ab57b2823efdb6add9582bc9058bdb28a5c30cb07cf4c245e2d93ef76847dfa2c8796c762fd0d71d2dae55d51a3641f994c36839799022f3c7f9d8c2384daad59fb1065953eedb2771d585f8ca60ef52a387ac6bb998049698f256e416d5fb9ac3abc1fcb2669be33f023120114aebddfb899ee3d1dab3fb6d28a79b9cdb5ce445df893492fdb84592dd4cb9c4333f418e7c92cb94061c201392a1799d27685a71fb6eced5914553c12d1248b76d461da7248b1ba7c23216d9f4f4f8e07ca3f8fdc86cb3edde0bdee22b66ad7a7af7dfd4f498f1d1c614752f70d4dc0dbd734c4cc23d68fa8ef85386c31a0b4a7fef5af7255d14073faa6ca0f5482062019e1a3ff6ffe1a910589e2d46cbfe5be12da652b033975e9f01932fecbc133571493f144432f8b1efda3ba9eca4abe5f297a4c6674d5fc5e1422d420ed0215a662f1af1da4b26a2a3ce317319317413a30b416bc85675b5e565813efa4b4660c1eeee29996cc639d4c9bc4b4d990e0f9ee8cd331b55b1311d17a2849", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) 22:22:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xa00) 22:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f99800]}) 22:22:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000180)) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) 22:22:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xc00) 22:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 22:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) 22:22:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xe00) 22:22:26 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) 22:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f99800]}) 22:22:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf00) 22:22:26 executing program 0: lookup_dcookie(0x2, &(0x7f0000000380)=""/52, 0x34) [ 2778.905805][ T2409] validate_nla: 27 callbacks suppressed [ 2778.905816][ T2409] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 22:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x5, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="1535502e121f3411e6bd3bd5bff6fac24ccd32fafe37ae0e8b0259c213bc1cc6eaa4fde6cf8d6da151ca808685e2a7c79497fdd76595e5e250c9fb92e987fd6df1b7b283604730bb6cb1877636ec68a128a7bb98410af8b3c60f4d5ab64fa2dbe6ab85df8b19f9d82d71801a8657f79692065cd024a0694ca68c9a95847e89cae0dcf3d43b85ebf93e94e63c25615eb2efcd03b566ca0f67c2eeb3e703d54a149edcd4f52048cc0836ee2ddbec397003d90a825870e5c1d58b493568ad29f785ec4fc06d92aeb87b26fc5ff68990832243cf552c1371bb314817890451ecbb6a91e4a85737c934ee96ab", 0xea, 0x81}, {&(0x7f00000013c0)="9cafc2abc957a450145ef31a136af817582083a4540da67c3f042a55562098cde930415bb4af72e0c0b06d50f6d2b26270e7b0afcc67eb8e00d109e65441b05f976718f7fdc6c00beee53f8ee283b463244124c9d60563cb0f41a666b607e0f5d02f9ffe0245e56a542c0530c699bcf0ea74c563258892ac918eaa6789a41265c6404e1a3302450a53900bff164d7ef3b5e57adc7b1dcb181069e559fc12", 0x9e, 0xfffffffffffffffa}, {&(0x7f0000001480)="8d22ee0664f13a38bb0be19524b8311e2cc65a9780d29a5e2efaf057679ac31584ae08b220fd3d27b0992a48f51d2d062bfddd66a3d869dbbd8f34673979c7cfa802800f6b338391", 0x48, 0x3}, {&(0x7f0000001500)="9d07fd48172c51e76ecb5a924851fb32ba58de8c21b7b0ec8e42f0bd9a537c4993a262af3ed84080883ff5766c4357c44110bb22a1f6d973fbd302f72613588c48c7b31af164830c7c3a0dc0c740c49f701b519b1ebfeb80eb0e13fde403dcacd656a005dc7212bf97dec774f5bb4c1200a103d5cc4b917beb570e07ef63b1e4bf81bb294b26c77c93ccb6ee2223d4ef", 0x90, 0xfffffffffffffffc}], 0x8040, &(0x7f0000001640)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@journal_checksum='journal_checksum'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@commit={'commit', 0x3d, 0x800}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@subj_user={'subj_user'}}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}]}) 22:22:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f0000002400)="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", 0x1000}], 0x2}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000100)) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000380)={{0x0, 0x0, 0x80}}) r4 = semget$private(0x0, 0x1, 0x0) semop(r4, &(0x7f0000000200)=[{}], 0x1df) semop(r4, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x18200, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xee00, r5, r7, 0x0, 0x2}, 0x2, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0xfd50}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x2000) [ 2779.084499][ T2418] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:27 executing program 0: lookup_dcookie(0x0, &(0x7f0000000380)=""/52, 0x34) [ 2779.223154][ T2479] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x3f00) 22:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) 22:22:27 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) 22:22:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x200, 0x8, 0x4, 0x40000, 0x7, {0x77359400}, {0x7, 0x0, 0x81, 0x0, 0x1, 0x0, "9c3cbac6"}, 0x3ff, 0x4, @userptr=0x2, 0x0, 0x0, r0}) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x7, 0x3f, 0x45e}) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x40, 0x80000001, 0x1}) [ 2779.525883][ T2617] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4000) 22:22:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x4000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xa0b) r5 = dup(r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r10 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x0) keyctl$revoke(0x3, r10) write$P9_RRENAME(r9, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r11, r8, 0x0) write$P9_RGETATTR(r5, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x982, {0x8, 0x1, 0x1}, 0x12, r7, r11, 0x63, 0xff, 0x0, 0x9, 0xb6, 0x9, 0x200, 0x100, 0x3, 0x7f, 0x0, 0x20, 0x1, 0x4, 0x9}}, 0xa0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r13) write$P9_RSTATu(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="ac0000007d0200000066000600040000001001000000080000000000000000008c31000000000100000000080000000000000500215e2d6c6f00001400706f7369785f61636c5f616363657373626465761a00776c616e302d6d643573756d5b2d766d6e65743063707573657431006c6f706f7369785f61636c5f6163636573733a2474727573746564212a70727369785f61636c5f6163636573732d656d302a33339108812bbbc6f73c65e23c98c1", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r13], 0xac) 22:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) [ 2779.768005][ T2753] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2779.873456][ T2758] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 22:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 22:22:28 executing program 2: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x27e8614a3df9fa4e) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4800) 22:22:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x7, 0xfffffc01}) 22:22:28 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x4000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xa0b) r5 = dup(r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r10 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x0) keyctl$revoke(0x3, r10) write$P9_RRENAME(r9, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r11, r8, 0x0) write$P9_RGETATTR(r5, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x982, {0x8, 0x1, 0x1}, 0x12, r7, r11, 0x63, 0xff, 0x0, 0x9, 0xb6, 0x9, 0x200, 0x100, 0x3, 0x7f, 0x0, 0x20, 0x1, 0x4, 0x9}}, 0xa0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r13) write$P9_RSTATu(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="ac0000007d0200000066000600040000001001000000080000000000000000008c31000000000100000000080000000000000500215e2d6c6f00001400706f7369785f61636c5f616363657373626465761a00776c616e302d6d643573756d5b2d766d6e65743063707573657431006c6f706f7369785f61636c5f6163636573733a2474727573746564212a70727369785f61636c5f6163636573732d656d302a33339108812bbbc6f73c65e23c98c1", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r13], 0xac) [ 2780.340151][ T2866] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4c00) [ 2780.434296][ T2871] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 22:22:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) [ 2780.537922][ T2951] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 22:22:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x5865) 22:22:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x14, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r3, 0x7}, 0x8) 22:22:28 executing program 0 (fault-call:0 fault-nth:0): lookup_dcookie(0x0, 0x0, 0x0) 22:22:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) 22:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f99800]}) [ 2780.811279][ T2990] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6000) 22:22:28 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) 22:22:29 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x589f03, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsu\x00', 0x345883, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000600)={0x5, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, [], 0x4, 0x9}) io_setup(0x1f, &(0x7f0000000180)) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)={@null, @bcast}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @loopback}, r6}}, 0x30) 22:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) 22:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 22:22:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001380)={0x0, @isdn={0x22, 0x3f, 0x7, 0x8, 0x7f}, @hci={0x1f, 0x2, 0x4}, @xdp={0x2c, 0x0, 0x0, 0x11}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001340)='caif0\x00', 0x5, 0x2, 0x9}) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf2502000000050004000300000008000800e000000208000600ac1414bb08000b00", @ANYRES32=r3, @ANYBLOB="14000900ff02000000000000010000000000000108000800ac1e010108000800e0000001050003002b000000080008007f00000187ce995fc66a958b2581877e835293e8cda5962e5e66ff136b5870444867c9f6f31ebf6c00e610d682d1930303ddbbbb5b36f3c140e953053634573f304c2f97c3ac3e35b4641e4ed10207011da00922e79127d479f264c3d20249af5648096d4fa4fb39f508bb0225438d7b9bb546c08e5d6caa22f8985a84d755b7c944f6fdca66e26582efc2"], 0x68}, 0x1, 0x0, 0x0, 0x4930}, 0x4011) lookup_dcookie(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 22:22:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6558) 22:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) 22:22:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6800) 22:22:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000000c0)={@fixed={[], 0x11}, 0x4, 0xc000, 0x3, 0xbe1, 0x401, "a1cfe9e57ed5507ee21557aefeb1a4a84aad111322b2243064aa0dc2702f55a865539c547d0598230f951b090adc23b12204483e64ae5d8f3a744624c514fc4412a8348996330e5c890483edaf3291d7b57c66c1c59c2e1fa84488a1f4c0a10f842ba6cbe58c820636eb923e884887040f21b36691f5a835ad7a21fce8b0d201"}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000040)={0x9, 0x3}) 22:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f99800]}) 22:22:29 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) sched_rr_get_interval(r0, &(0x7f0000000000)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="d2343f0a815d5f0ec12b8c27a04c6eead0c32bdcb2807f67cf99da921d72ab34b3466ca3af13f8df820580eefec8563e4ecccf68a573929c86c468ef92f685fdea31d9a33e1644435be120b55ecc2db7117f355eb98010821e317ae55d22ae794650f7b22c077fa0801b9510e3bf63ebed8c05c286725ca19b40452716a2ee5787c24f17ecfd7b80f43f9a37bef14d71b40fedd8384beb8f47c9eacadbc37697f5470c797d6f5b5ebff0aa7306ea30d4", 0xb0, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}) 22:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6b02) 22:22:29 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x131a00, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000140)='\xa1secunet1#ppp1vmnbt0*/+s\necurity:+\x97\f\xd09\rl\x98\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) keyctl$describe(0x6, r1, &(0x7f0000000100)=""/48, 0x30) setsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000080)="59549915bb6cfee8d5020ec063b4bdcea3557f0839a15f22b383f7f3142bf1aff771", 0x22) lookup_dcookie(0x0, 0x0, 0x0) 22:22:29 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x9, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet6_dccp_int(r0, 0x21, 0x1b, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x280481, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000000c0)={{0x4, @addr=0x5}, 0x8, 0x81, 0x9730}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000100)) 22:22:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6c00) 22:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 22:22:30 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x2) 22:22:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7400) 22:22:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/208, 0xd0}], 0x1, &(0x7f0000000240)=""/42, 0x2a}, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7a00) 22:22:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 22:22:30 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xb58e, 0x2b7b, 0x8, 0x9, 0x18, "8323c60f8d192642dc2d582c03ce1e0902ee72"}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x0, 0x9b, 0x400, 0x120e, 0x4}) 22:22:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x8100) 22:22:30 executing program 4: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf000) 22:22:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0x4a}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x500, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x8d3d3b2ee8458b58, 0x0, 0x0, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x4008000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x2000a084) 22:22:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:31 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x171a00, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x8, 0x3, 0x4, 0x200000, 0x5, {}, {0x4, 0x2, 0x1, 0xdd, 0x8, 0x50, "379bb4c5"}, 0x0, 0x1, @planes=&(0x7f0000000000)={0x5, 0x6, @mem_offset=0x1, 0x9}, 0x598b, 0x0, 0xffffffffffffffff}) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000067c2c4fbf0e3628e920c14fb070200ff0325739aae00006974792f530000"], 0x16) 22:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf0ffff) 22:22:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x1000000) 22:22:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 22:22:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000040)={0xf7, &(0x7f00000000c0)="df636d8d3285a873ff381344c023e689b813f4b9577fbb2169be0a4ef86a204bc2accd1814e5da694f0773a070e63a0ced50c5252b0ed071c45985f9c76123053082cc4ddf6846331fc27e39dacd812a222856ab6487b701f8f61c3d47f2df391bddfd7fa2822557ac0473be1db1044739efb9f72d45315438a69f9950ec5eb48e1e32c48979c12a133a6636f9c756d34412336fb1185206125f6f960d0b089ef987bb4653d2b608be0d976d5459762351033739ebf12eabe8b3ef16617d1782fc62e1b69636c535d2970add8298fcde32fb318de92df84535928faa38c40c6d30e45a2bb26addda8ab925065ab9c753bbe56183220a9c"}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:31 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x4000) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)="25d7b0d3af2489aa7fa38fb3c785ca879f0ae73b65dc29d61dd291c813a22d495d567e721c216abe016a78939526c1d58850c902a104349f34416ad183883bc9ca1f9a7556b3385bceec55fae69a00ecc9894d0d9bcbb60c52bdc15cec1ae1593a80110ee6e5d9a1389b7c340d1c87308bfa4130cf48aa71b09ded27ee5b485ad26696c30bc148915e865027dc7813f7d5d956ab4618f31dca85a4d1bcc2ff6b6c4a94050f548a944e5b8bd75144f9fbbb160d47f9c4f51dc8613cd3d86f0d95bf814335727c5f339fbe80d411b80cfdcdfd6fcfe7ffed1f4e505bd5f49b8b2cb2f6242abb20c28fcfd87d9de21cca", 0xef) 22:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x2000000) 22:22:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=""/55, 0x4}, 0x20) 22:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x26b0000) 22:22:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:31 executing program 0: 22:22:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x3000000) 22:22:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f99800]}) [ 2784.209447][ T5043] validate_nla: 24 callbacks suppressed [ 2784.209458][ T5043] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:32 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfc}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xdf2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x40}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8ae}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ff}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x7, 0x0, [0x14, 0x2, 0x10]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10008812}, 0x44001) 22:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) [ 2784.294615][ T5044] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4000000) 22:22:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x40000) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) [ 2784.583732][ T5256] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f99800]}) [ 2784.684444][ T5262] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x5000000) 22:22:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/19, 0x13}], 0x3}, 0x200}, {{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/110, 0x6e}], 0x1}, 0x401}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/135, 0x87}, {&(0x7f0000001640)=""/219, 0xdb}, {&(0x7f0000001740)}], 0x7, &(0x7f0000001800)=""/9, 0x9}, 0x4}, {{&(0x7f0000001840)=@l2tp, 0x80, &(0x7f0000001c40)=[{&(0x7f00000018c0)=""/163, 0xa3}, {&(0x7f0000001980)=""/61, 0x3d}, {&(0x7f00000019c0)=""/124, 0x7c}, {&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/201, 0xc9}, {&(0x7f0000001c00)=""/38, 0x26}], 0x6, &(0x7f0000001cc0)=""/164, 0xa4}, 0x7}, {{&(0x7f0000001d80)=@ipx, 0x80, &(0x7f0000003100)=[{&(0x7f0000001e00)=""/192, 0xc0}, {&(0x7f0000001ec0)=""/176, 0xb0}, {&(0x7f0000001f80)=""/205, 0xcd}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/80, 0x50}], 0x5, &(0x7f0000003180)=""/94, 0x5e}, 0x1}, {{&(0x7f0000003200)=@ipx, 0x80, &(0x7f0000003400)=[{&(0x7f0000003280)=""/170, 0xaa}, {&(0x7f0000003340)}, {&(0x7f0000003380)=""/119, 0x77}], 0x3, &(0x7f0000003440)=""/53, 0x35}, 0xd1}], 0x6, 0x2000, &(0x7f0000003640)={r3, r4+10000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000003680)={'batadv_slave_0\x00', r5}) lookup_dcookie(0x7, 0x0, 0x18) [ 2784.735589][ T5262] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) [ 2784.902079][ T5352] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:33 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x7fff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6000000) [ 2785.148416][ T5579] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:33 executing program 0: lookup_dcookie(0x401, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x80) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x3f, 0x7}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x46, 0x1, 0x2, 0xa4c8}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2307337c2a937c6a, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x1ff, 0x1}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) r4 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101, 0x180) ioctl$RTC_WIE_ON(r4, 0x700f) 22:22:33 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) [ 2785.191396][ T5580] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7000000) 22:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) [ 2785.317671][ T5685] FAULT_INJECTION: forcing a failure. [ 2785.317671][ T5685] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.364310][ T5685] CPU: 0 PID: 5685 Comm: syz-executor.4 Not tainted 5.5.0-syzkaller #0 [ 2785.372703][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.382775][ T5685] Call Trace: [ 2785.386085][ T5685] dump_stack+0x197/0x210 [ 2785.390435][ T5685] should_fail.cold+0xa/0x15 [ 2785.395051][ T5685] ? fault_create_debugfs_attr+0x180/0x180 [ 2785.400894][ T5685] ? ___might_sleep+0x163/0x2c0 [ 2785.405780][ T5685] __should_failslab+0x121/0x190 [ 2785.410738][ T5685] should_failslab+0x9/0x14 [ 2785.415251][ T5685] __kmalloc+0x2e0/0x770 [ 2785.419500][ T5685] ? mark_held_locks+0xf0/0xf0 [ 2785.424270][ T5685] ? mark_lock+0xc2/0x1220 [ 2785.428698][ T5685] ? _parse_integer+0x190/0x190 [ 2785.433563][ T5685] ? tomoyo_realpath_from_path+0xc5/0x660 [ 2785.439303][ T5685] tomoyo_realpath_from_path+0xc5/0x660 [ 2785.439698][ T5759] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2785.444854][ T5685] ? tomoyo_path_number_perm+0x193/0x520 [ 2785.444889][ T5685] tomoyo_path_number_perm+0x1dd/0x520 [ 2785.444905][ T5685] ? tomoyo_path_number_perm+0x193/0x520 [ 2785.444927][ T5685] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2785.444942][ T5685] ? __f_unlock_pos+0x19/0x20 [ 2785.445015][ T5685] ? __fget_files+0x359/0x520 [ 2785.485103][ T5685] ? ksys_dup3+0x3e0/0x3e0 [ 2785.489525][ T5685] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2785.495774][ T5685] ? fput_many+0x12c/0x1a0 [ 2785.500211][ T5685] tomoyo_file_ioctl+0x23/0x30 [ 2785.505071][ T5685] security_file_ioctl+0x77/0xc0 [ 2785.510016][ T5685] ksys_ioctl+0x56/0x180 [ 2785.514272][ T5685] __x64_sys_ioctl+0x73/0xb0 [ 2785.518876][ T5685] do_syscall_64+0xfa/0x790 [ 2785.523396][ T5685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2785.529290][ T5685] RIP: 0033:0x45b399 [ 2785.533187][ T5685] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2785.552792][ T5685] RSP: 002b:00007fe7c0f83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2785.561215][ T5685] RAX: ffffffffffffffda RBX: 00007fe7c0f846d4 RCX: 000000000045b399 [ 2785.569202][ T5685] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2785.577177][ T5685] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2785.585245][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2785.593223][ T5685] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000000 22:22:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000040)=0x80) socket$kcm(0x29, 0xf, 0x0) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf99800]}) [ 2785.677862][ T5685] ERROR: Out of memory at tomoyo_realpath_from_path. 22:22:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xa000000) 22:22:33 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200800, 0x89) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x3}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x8, &(0x7f00000000c0)=')md5sum\x00'}, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) kcmp(r1, r3, 0x3, r4, r0) 22:22:33 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r5, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x6, 0x0, 0x10000, 0x9b}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f00000001c0)={r6, 0x5}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) [ 2785.767921][ T5799] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:33 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xc000000) 22:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26f0f000]}) 22:22:34 executing program 0: lookup_dcookie(0x8, 0x0, 0x0) 22:22:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) [ 2786.238027][ T6020] FAULT_INJECTION: forcing a failure. [ 2786.238027][ T6020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2786.251289][ T6020] CPU: 1 PID: 6020 Comm: syz-executor.4 Not tainted 5.5.0-syzkaller #0 [ 2786.259533][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.269598][ T6020] Call Trace: [ 2786.272910][ T6020] dump_stack+0x197/0x210 [ 2786.277268][ T6020] should_fail.cold+0xa/0x15 [ 2786.281880][ T6020] ? fault_create_debugfs_attr+0x180/0x180 [ 2786.287703][ T6020] ? __kasan_check_read+0x11/0x20 [ 2786.292742][ T6020] ? mark_lock+0xc2/0x1220 [ 2786.297175][ T6020] ? __kernel_text_address+0xd/0x40 [ 2786.302402][ T6020] should_fail_alloc_page+0x50/0x60 [ 2786.307613][ T6020] __alloc_pages_nodemask+0x1a1/0x910 [ 2786.313006][ T6020] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2786.318738][ T6020] ? __kasan_check_read+0x11/0x20 [ 2786.323781][ T6020] ? fault_create_debugfs_attr+0x180/0x180 [ 2786.329613][ T6020] cache_grow_begin+0x90/0xc60 [ 2786.334389][ T6020] ? trace_hardirqs_off+0x62/0x240 [ 2786.339519][ T6020] __kmalloc+0x6b2/0x770 [ 2786.343769][ T6020] ? mark_held_locks+0xf0/0xf0 [ 2786.348538][ T6020] ? mark_lock+0xc2/0x1220 [ 2786.352971][ T6020] ? tomoyo_realpath_from_path+0xc5/0x660 [ 2786.358716][ T6020] tomoyo_realpath_from_path+0xc5/0x660 [ 2786.364366][ T6020] ? tomoyo_path_number_perm+0x193/0x520 [ 2786.370027][ T6020] tomoyo_path_number_perm+0x1dd/0x520 [ 2786.375500][ T6020] ? tomoyo_path_number_perm+0x193/0x520 [ 2786.381150][ T6020] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2786.387003][ T6020] ? __f_unlock_pos+0x19/0x20 [ 2786.391753][ T6020] ? __fget_files+0x359/0x520 [ 2786.396453][ T6020] ? ksys_dup3+0x3e0/0x3e0 [ 2786.400880][ T6020] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2786.407145][ T6020] ? fput_many+0x12c/0x1a0 [ 2786.411574][ T6020] tomoyo_file_ioctl+0x23/0x30 [ 2786.416350][ T6020] security_file_ioctl+0x77/0xc0 [ 2786.421308][ T6020] ksys_ioctl+0x56/0x180 [ 2786.425580][ T6020] __x64_sys_ioctl+0x73/0xb0 [ 2786.430192][ T6020] do_syscall_64+0xfa/0x790 [ 2786.434723][ T6020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2786.440758][ T6020] RIP: 0033:0x45b399 [ 2786.444669][ T6020] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2786.464283][ T6020] RSP: 002b:00007fe7c0f83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.472710][ T6020] RAX: ffffffffffffffda RBX: 00007fe7c0f846d4 RCX: 000000000045b399 [ 2786.480695][ T6020] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2786.488695][ T6020] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2786.496765][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2786.504752][ T6020] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000001 22:22:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x67, &(0x7f0000000000)="424d811128227ffef5c2b24bf5e98c36da228988192aa721f2ba2fca7ec24bd580e3527e18b4c23362295223c60c0e913d2510700e22319b88a31b5ee19ce40c0580a1b9d52d8b352a8cca6d339cb5a256f59fa4a4f7fe82b4295e72c2e99d1b11e8abbd5464b2", 0x86, 0x0, &(0x7f0000000080)="1ef0fb092d80dd409ce026973d912344bbb4f5e0ff86bed8565ab5d03fed5b34474d0c178a07d0d6d73fef6fa63d4d2da33ae8f731f0778930a238bde8e62a3030617b46e8fe78d064e1fbcb36daadf4ce74d0e20282e7bc98f3cf0d04298e6eb5f6b0ec989cb643014bf4443693e3dfde3ac445eb776729339802f510f5c4d9e13d770e50e2"}) lookup_dcookie(0x0, 0x0, 0x0) 22:22:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xe000000) 22:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 22:22:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf000000) 22:22:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x6761393fcea4c555) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x802, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000151a08010100000000005d0004000000bde48c7ee3d7737b00000814000480080009090000012c0004800800024000000007c19a5a785fcba8ddcb7c001ea4230800014000000003cb094d2d6054ea69da7f0800024000000007080002e66a0f344a895d52f825"], 0x54}}, 0x10) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) 22:22:34 executing program 0: lookup_dcookie(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$int_out(r1, 0x2, &(0x7f0000000080)) 22:22:34 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsu\x00', 0xfdf6c54faff96a3b, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x204000, 0x0) bind$isdn_base(r5, &(0x7f0000000380)={0x22, 0x7, 0xc0, 0x1, 0x4}, 0x6) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r7 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7, 0x80000) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f00000001c0)=0x2, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:35 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x10000000) 22:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 22:22:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1190c0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x2}}, 0x3b, 0x5, &(0x7f0000000040)="ec1de9005416eb05a07faf298bfeaa1cf73dcd7fabcd7bec0cdff7c505c253f735f6c7c0838e0f75b7f19fc246fb0e729dbbf11c4d04859951d400"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x20000000) 22:22:35 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x4a0000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000340)=0x7b05, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x7}}, 0x18) lookup_dcookie(0x40000000000000f4, 0x0, 0xa38966b26d1467e2) 22:22:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:22:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x3f000000) 22:22:35 executing program 2: r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f0000000080)="6258eb33ee09", 0x5}], 0x2}, 0x4) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f0f000]}) 22:22:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x40000000) 22:22:35 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x8ba1e5f8bc17d0ea, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x15, 0xffff}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000140)=0x4) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r4}) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000200)={0x57, 0x4, 0x5, 0x8, 0x5, 0x81}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:35 executing program 0: lookup_dcookie(0x6, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x14d000) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400400, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000000c0)=0x62e32e51, 0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x1, "99"}, 0x2) 22:22:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x2, &(0x7f0000000300)=""/178) 22:22:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x48000000) 22:22:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) r2 = getpgrp(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040), &(0x7f0000000080)=0x4) setpriority(0x0, r2, 0xffff) setpgid(r1, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) bind$rose(r4, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 22:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f0f000]}) 22:22:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4c000000) 22:22:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x35bf02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r1, r2}}, 0x18) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x101580) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x10, &(0x7f0000000300)=""/178) 22:22:36 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) recvfrom$llc(r1, &(0x7f0000000040)=""/104, 0x68, 0x0, &(0x7f00000000c0)={0x1a, 0x118, 0x9, 0x0, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x65) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 22:22:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x60000000) 22:22:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b2f, &(0x7f0000000300)=""/178) 22:22:36 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) prctl$PR_GET_KEEPCAPS(0x7) 22:22:36 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="98660f1e657b6ccee0044aff950c3c3d"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x36}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x65580000) 22:22:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b30, &(0x7f0000000300)=""/178) 22:22:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002600)=0x0) r2 = getpgrp(r1) setpriority(0x0, r2, 0xffff) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r5, 0x0, 0x1000, 0x42, &(0x7f00000004c0)="b1831770968149240f01e24eee4af0a46acdac6ebbcef80cc8d2a384da8939e1241ffb3371900b758f208103ec531926f75cc1ded9991a7435897df54b437c60596c4b100335ca3add39775f6244bc6639afee28919a3c58adfcfea85c8059eadc9ca38b4500ad8acb9370cbdd83ac035541b19940f93cc6a4cce88a73f84e1aa3f4f6e5954e04bf43f7308c0352e47e93122c39f7067c63c240abcf4e4f2958e79a72030778ec244dfa24a6baf19f35705312e71abfe4c1514a77c0f7e1aa4780be971e28e72821994ce02fe7eaead3ffa925f50a87b0d64c9472de7eb5804d78883652173ba90ba02761c8e6dbb939c4b76098823bd81323a15fb996297910398fd7d4a21ac4e753d72c5fcc0af94dbb0287664d3d544148272eba4cad050ccb403efd4889c050b0d07cfddecb093b983de0101c74709c94d6041a890c2963aa807658a789a0ba263074ad9ec243d98d8dbb8adc948705f9828d5f6ad4bd4f8eba6a9865302d799f758d48ea42564e3525237b7476f17b631502a2031c4787bb95954a3009764fd46d058ddd3bb70a9ece0de262d248b70e1cd9cb4f37cc6e03aebfe212f02f38dc9fd1e33bba9a24b9ee72f0611051bd2c82206d29840d7d66cef390a86c7ef5c979ef60b44d799329a070dab45212425dc1acb86904ad7c9dc0ede4fdc9c28f6d1eddaacb346e85bfacf663c2967c96f89877b790b1323b1a4edd0068ebce9fdca56eac363f410beba4ef6ee79afa608a74683dd713fbd5c3dc55285b7abfcead65e30095a376dcf226ca80f706a342cac1c2162c71892027a01e6efb236f8af337c269b17a00127f7fc0a03d64352ff3ae51c0235340f45ca5fd520c25b99607dcd17baa5a78281c3b2825665d3cf54b42fa67d224247b6d3058940c7fec819ce419eff61d423ee47d736fe44b7eacd9516351d15a9c1176e9de10182c0c25f0857b3c0f0c9d061ef1d6507d4e48dc35db472d6395a576c05c79b7f10e9b1c519c4efef1d68862be1767348ae43322c2b203625802671c871f860528b81255398e4daf0a4d83408ecaf9e5ea7a2d84d018ed2bfaf48d562032affddbaebaca911c3f32a82fe6a28e2d35f8bf4cac1fe95466668ee186c1ca82c3175510bb93ad6ba34f27c1e7fb7ee8d260af0c500b62204461b616f1ee652978e1bba011436a2b8aa8f2e5ab4dd88839a0aad337922b52f059922b8b39a2565462bb024b8807200d1dca1ca0fbf6e30b4b8f616701be35961e28af6744685a3871ae27aeedc6c740d833db60bcb94d4174097d1b8157a1ffa3fb1f80ecbe5ad51bf98506a5dc4dff01131433299e3274baa59f3205a87ee4e510cd5b2bc0888a3c81abc7e852c2233270bae3db9ce3d8ee2ee28afe32533f521a385d44f85462983d0133078fc73fe09e100d06eb9501e8d87070207113599de7d7bc86ef4dad0bd519b30923a1fb29e6951846459222100e2d6be74db28a69b7b5ad4d7082bede643d427699d9b41bb40774af623a5c786a675219555a230d54d53d85bb6cccd02a719cbd293fcb0f96259cb09b5b8c3a77383709dce2e31a592420c59cb588a18c787313389aff2798d33676de91c43bfdb562d6fd6f5de531c6f263d84c0b67c54e2f1566a1362cc19f8c5a6a33db2f77516978af88de6c4abcfc875cd7bc3c9879070eb91a0ab11dfc32ff6c7ffb137f2eb4f9532e0d225454098fcf9c8481e05e3639e179f98f4089f57767e8adf19abea0132a4d29f6569436510cf478e46d1b6327e34c42366f5d7641c16bc447e4bcad0c59f319103b3a2283efcaa51915e49661a6ed5069a984ddda78c69e2b5a1ef6e8e46acf5fbe8c0cd9a3bf4a131fa94abc849bb07b3f3f186c65d8b648c2976004299c3c0d1d1b24fccfe84084307dbd8ca8a30a2e5bd816cc4fb451b74a57f66dd5176bc504237cbce34a5968e93202c9261b148b4a3fc7aff3d2ae47ee39975d679f008e081f9500f8a1a91a4cb9491041a1bf85a618c1704caaacbb74155a9135ab03ec42b28ef183e31496d08894d4a43930d152f50ad5109678660fcf0c3361a9739cdca936d456c0e1b615cbb7bc1a614bd83ff44fff73dbe813e3485ff46f7897213ea7cd5ed29f595c1848ab67da6b255cd1b750ef9f4d698162899cbbc8e2ef3e56f04a359b9687bdccea618a5a58f42d256e64c1b564854bb948ea3edf8bd2603605af9d6203021fd6220649aa089d3f1aa267a8bd7bad79f6aaa77d10c4edcbb49d8310c0c871f449f69fefcc687dda1e2b211091d0d118f5a19e2ea00140f105175e051afcc027d0fd60190ed040525b1d69c24f065b6795551a4f7bb185cb40f88d3832b1b0128531af30361cbbb4967ccff83a551914829fd29e6a64ae145ae49d7cdd197ad62d11d383d100ba9912df63294d0f1e8cce089271b687538af572bba68a983704de83e344cd61d10c70131f14661bfcdf6b78a1b42b77477c9e3158274c7f43ad62125dc696a5a559c1ca023891adcfd1ae82c15aefb9d76f19ce3eadc75b8901fa699855d5d3940d3a88f0b6b496a907ec81e4b5b8677b48812efe345e3ae665a9ef81ccb7d91a13e92c7d168610f49cdd77353096d3fef3d350f3739d35601b9459d18ac952fa5d282ade447c850f55b0f703f8e3e679b81540ae11da37eae6fc8b02441bf06bea75e2f1d7cbb9271b45c7e54484dd30ffde67f60c8199197b11e0129eeb2c2dc40a5964f210e9fa73aae536d8cd732ad8d0ba799ee07ada4a913f2b7a41749209ec70b1ec312ed0c42d237ea89b3cc6bfbc8e9b4773a67807bfd1d1b98cca139ecabc22ae7938e0263d75e04ae4ceefd92c061318b610364998b588e255ebfded945fa2a5d2f83ab7c3bca492729992e80c4fbc851ca6449f5a43566694208b296424a34e4340c199d1069dfaff497070b6715d4677964dbfd2a33dfe170440bb3dd12e720f464ec9ae09e4f1454ffb59bbb78a50b6e06c0ce589de109bbc30d0aa243f93c106b7c2a531159a6db991504d72607adb0342dc3f12825d51d7139f277a0264765f82a32ee7c9e2cfee50a2f0258054dacdd9fe3d4b108f4d211c4aa14510b3882f121025b95d2262d9f7e1628e6925bb82dd436a49d503414a4e4903f2ca0a6fb292cfeb2f6ecc7c826598204b76cbe9f155a1c18e3c8c79db8e21dc2650ea4dce0e0e5cd9214d6a1296549657f45460294b6557eda617679f838556fbfe4e6dd024b8e86b53f24704ff57d231dc7fbf4cce68c8964076922c33a5c7707809953a3313a8ecb40ceee8aa809c1fcb2ee77b449f1cb44b6b5cd155e084d686c3627476b837735869765e80deed96f97af152f3b0db0bd07a96eaa9bc24bdf01cfe85b11a8ea6e4cdca732c4a9ee9d207ee4a08b22c3e87ea6e01c6cbd83e291511850b2e5e24c73ac5cd2094ce26ae609e5cc52c93b0b381bbea023acf6d3c0664ce6ab675737ca6634b14f09a95b9ade9e84ba669f74427755c371f0c41d2e6aacad78e3b6d42b8e9bb03648ab204a54159988f5aee748abde86dda7a12224185100d9b68a7d3c16aa9da6d89d333d284674920ee6e770d7997d7a0adfb4a053e5a9df54a8dc6748b92785440d09adfc9471bb6f814e59567da0decc8831e0dae8f10fc8b473edbb259ebf03463b7ebb00d41f2e57aa641d70186743dbfce4467c7a18215fdff303a4bab82e698ee3cd498bd0e6dbf56ad55734c153e903bcb732c0ab66d809e421429d2b50be0430cc342250b5de40d78ed559d916e42381647b0e3dab9c9398633de727d3d3585a1ab5e44ddd29c22de3e05885d66fc98bea6ec25733577a1f8d1b643bdf15abdf2e6d0db4f4053831862941bbf14da287ab4a0aaf0d77e92b1e106ac85926cbbaeeaeda717a0bdcb938ffc5a2ade8c177a04c3fdc77624d144790e8a5d00fa66fd0f5e0e4ae6783720e287f47cb39986bb0296776fd94c91dae67079392f172005871b9e073f209008bed9db7c460bda09915c1707e666e06218cc722e373e4f07ff0431d28ac8d4b7b7417ac816854e04babf1c9ecc06c710536d551dcc32142e6eb22df870bc1467d0bdd1017ee5e65c0df951a579c1b29db155cb1e471a10fa174294d34caef6316f48ce992583ead846f656cef811f1fb6098d63ab139701f918b50008e0435955889bef753c3f9e71522177b502a06983dbfe476f35f778911999d017f06f238e27a73677ae176bb7898eb69f625214d8c8fdebaa9e6e117c5bd52d62f5e6900b3a8d285c3bc82cd33f51b053b68f89160af9128508cecb5d6c9ef90782aa58c2e7b485aca3c01cacb7a1584bd631f9b6bf7778e126c4770a44d3de1661d7406371d90857a01fdcbd05faad97581d87ac3c13d662f4ab01c632aec71f55af09d4a85a7ed405a80d4180c9f9a7a5d893e6191af049b4a57d26b04e00a0d441440a82a0e0318163852890ba878863730a0f9491112d118c4b0a428b049b95f571977bf4194a26528be8a273f201a8b89a98a5a3802fcdc6f9be688e93b489e52c9fde70d14fa7f7dd8e7330e65fd8e356fe1030ca58f4200ce80d230853ba6d75b0b89d422062f2aebb51b500a811d480761b42f7e48bded39fe9ea3484e049e0fa32a204dfce1fc28c7a9970ba068e59dde26250fbb485d2d2c77d2eea15d473797e90df725e94a93a2fc3d25081922774371383ab4882fe79ba6c955d8417c822f86b68c693be7fc104e3e1560f8cf550ce4a323f236b0e7b877764b97411468761eec1bf246c4b5e060f16296c69f69acd5e2a8e7a7578f3327578612b17e6bc6550e629e21055969e274b9579f1efab121633d1a381cc06e2712e898173fef79d5c5581eac22550cbb2f96b09ac26fe6eaee78d3f26d27c3bcfac9e8ef4341eb05224f874be02a5b0226b5420fafa6365304d9460eaeeb8b142c7f2212f5052db3058a8a769e0dc7d278aa46ee4489b0d6a71c3d1629412d4aef9cb8774eb750304e540232963430546c9c5a3f00ffa87964d1866d018eb418a92610d5fd3d279d1d78d2b530725044f32318a7f684f67b5f01579d725b2c3ffdbc2bfb5205f1b7d9b31b2a43a7808610c07af98f08110e4160724a52acba63256d74c9f883fdde6966df7403e3ddd47db2b48fd2751808473da8dffc9b7fd0f1698d3c53cde5f42face4e972230948ac15ea324ce9623de420cee691a9a7a6c3dbd7cba5551842a7de3f1704ec2018018869709103b1b73bf4a2cec9857ff92d25f1a1380df48ed72ed253c7863463567427722da4d39a09bd99df1d4c2f3b0d34f9565058d045561df07f6038f7338cb2b652b2ee4e3fc5d7a24f264336771b310a9e08bc49f16b4a8165d5b4696c6a0a274221d91288334b3172cd7dbc1a90b53aad08fde6b58d5e510446e9c1c37da7b44645df413343adbad383b14580c92fcaf003020ecb9e6530818828777d4a7eda7403b4ba213521710964424624cf5ec519093232315c3e426f731a55516fc6d65a66d7aa23ee25af3ca2305bafc21e10fbc6695f25006d26f3729e97bcf6fa83b0b3973f1e2fe43513d10dcad39d845666b47c7019ca4d5bb6e2a2f8e5bc23d3a721b23abc659914efffbc64976498c97ed907229dd32e3b6784a9e6715cc4ec900be4e2d736bfd629e3faae8bea6926a6def3fae1fca7df9f39872ea3f465d31851017a348370560c3fce5f091b25c9f6422cc31497e383c4a433ff650ecccccc0deea6376a3e3def8d9870643653f96a830cde35d8bb96129c287fe3cfd3c4ea533f50eb8ed46dfff0d1", &(0x7f00000014c0)=""/66, 0x5, 0x0, 0x46, 0x1000, &(0x7f0000001540)="bdcd2359e04b83be2b101d0e79b3d8b6e7db7c5ac3b673671902f6282c54e409763854083d9597b3c02a9ec518b1ab9703e2ab44fd2732ff78809cd4988d74c79bc1dbe0aff2", &(0x7f00000015c0)="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"}, 0x40) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) r7 = getpgrp(0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x9, 0xa, 0x4, 0x100000, 0x1000, {r8, r9/1000+10000}, {0x4, 0x9, 0x5, 0x3f, 0x7, 0x0, "83988038"}, 0x2, 0x2, @offset=0x853, 0x7, 0x0, r4}) recvfrom$rose(r10, &(0x7f0000000380)=""/210, 0xd2, 0x40000001, 0x0, 0x0) setpriority(0x0, r7, 0xffff) r11 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r11, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, r11, 0x0, 0x2, &(0x7f0000000140)='+\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r13 = getpgrp(r12) setsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f0000000480)={0x0, "391db8"}, 0x6) setpriority(0x0, r13, 0xffff) sched_setattr(r13, &(0x7f0000000000)={0x38, 0x1, 0x10000044, 0x117d, 0x2, 0x8, 0x100000000, 0x9, 0x2, 0x8a2}, 0x0) lookup_dcookie(0x79, 0x0, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) fcntl$setownex(r14, 0xf, &(0x7f0000000280)={0x2, r15}) 22:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 22:22:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x68000000) 22:22:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b31, &(0x7f0000000300)=""/178) 22:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f0f000]}) 22:22:37 executing program 0: lookup_dcookie(0xfffffffffffffd6f, 0x0, 0x2c) 22:22:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0xfffffffffffffe98}], 0x1000000000000139}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) [ 2789.255742][ T8213] validate_nla: 21 callbacks suppressed [ 2789.255753][ T8213] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:37 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa60\xff^\xa3Y\x7f\x8b\x17\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cMi\x83\x00\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%J\xcb\xcfzt|\xdf_\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16M\xabe\xf5\xe5\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\fk\x940\xd8\x9e\xeb\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xc0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00dUq;\x02\xee\xe3\xbc5\t\xe0^P\xae\\\x8d>\f\xf5\xc1\xb5?y\xb1!\xaf\x86g\xc5\xc5\xf51\x03\xd3\xe4\xf5&B\x96Wqc\x0f\xab^\xd8\t\xd4^\xd7\n\xbbsd\x86Q+\x8b(\xf0\x19\xb3\x8asM\x129\xb7\xa2\xb7~\'\xc2\x06q\xcf\xf8\xd5\xb8cb\xde\xe9\xd1\x16a\x87_V\x97\xdc\xd4nC\xcc\"\x9c@\xf8E\xfd5d\x8a\xa6\x01W\xad)\xe4\x12\xf4\xc7w\xe0@\x00\x00\x00\xd3>\xe1[\x9f\xe9\a\xc5f\xd6\x01d\xf9\xab\x10\xfd\xcc\x85\x9d\xc2\x8b\xdc)k\xc1\x18>\x9f\xdd\x14\xed\x8a\x16W\xf0\x8e\xef\xe9\xf1\x19\xa6\x16D\x0e9\x83\x14\x00'/430, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) ftruncate(r0, 0xa31) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) socket$l2tp6(0xa, 0x2, 0x73) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6c000000) 22:22:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b32, &(0x7f0000000300)=""/178) 22:22:37 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) fcntl$getflags(r1, 0x61a5da28df07eb96) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xc1e4721fa6dff68, 0x0, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980919, 0x3, [], @p_u32=&(0x7f0000000000)=0x7}}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x5b1, 0x0, 0x42, &(0x7f0000ffe000/0x1000)=nil, 0x80}) 22:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44f0f000]}) [ 2789.573567][ T8328] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2789.595161][ T8316] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x801, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x402100, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="88fbfe6265cbab8336e8d90d10258a89f2424cbd4c8c01cd8510f71c7d2cd8c88e619f64ac935c46a9c303517a7bed99f303fef4e1ad7fbc7c0e8634b78d08c875d3098c83149914c6d66b76cf3924bc1a68754b119314c4dc0cb605fdd4d7b62dcb760a0116f51d9a03c27857097f", 0x6f}, {&(0x7f0000000140)="1cfabe0e760ff2bd956ab5d362377f", 0xf}, {&(0x7f0000000180)="ce0e4521e3d0b6fe74f0a45111e03fd53bb4a048f8fd1bff9cef2fbf4e7f10c38feaaca7563401067bf2d6b258dce01ec0856ac6d9a25ab966b0aed909baf7243df67dc00d1c385ed49a94a707f754e247239369214f2160513c78e5b6ec8c0e758851814ff2f91bd16e8cdbb845ecd9c987c62a0c226771e21772a097ef43c38f2923095280d1ad9cb6d91a5898cc3ffb3e37c015d7ee7d2fb74d559e8ba85cdbb2076e9c6615411c12", 0xaa}, {&(0x7f0000000240)="d0479d3bddd5", 0x6}, {&(0x7f0000000280)="571b9b909bc09ceb5dca5926b3fbd59c5525cf07405d46011b851a0de5465160112788f10182691a0b8a86f6cce717f726833a8858e1caa9ce1baa0fed16f8cdd89c9b1dd43bd31d6d6e84065329aabdaa2c9c74c00a75ec470eeadaf8fc", 0x5e}, {&(0x7f0000000300)="ab2b797b28828d98370462ac04e02268d96c477d560e98032b0cc23cf577aa2938e3e7425103bacddcf2df274c2c542223fdafd558362f502d8bf3704166340c72302e366ea63f53df14eb4a7319c9aecef35fff57cd4c17d624bf3ab1b54d42fc0b5dd5438d126fc238d155706cead8e705846646a244d31fcb54b3f1f6b33f8a64311dc5692b48dd58f0c9cea462ca0468cdf6cc5ae0ded672768b36027f576bcbedf3cee7dcdb21be4064193a7d5153", 0xb1}, {&(0x7f00000003c0)="78c4a4a9f47310ff8bb5ae70fcb33877c95844648151c5901b2f2a6e224c127bf4c4b6d7581788c351f70f14a3b01251", 0x30}], 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="a00000000000000088000000ff0f0000b7c83fd2124e1b03c3cf3830f262b9a43d36dd7ea9846a713ca2ee78cb2384efbfd258f20000000000000004aaca19268810972865ae43fdaa2185a3054102dfd7f83a228041637fd8611fb58cea69ee1a09c2bfd7121c338162d57f4809e6148e94b432427134c84bbd231e4ed7dd0fa7c0d06791e6b754beeee2102d206e313048a39800"/160], 0xa0}, 0x4000080) read(r1, &(0x7f00000005c0)=""/226, 0xe2) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 22:22:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b33, &(0x7f0000000300)=""/178) 22:22:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x74000000) 22:22:37 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x208240, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:37 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x34}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) [ 2789.931341][ T8630] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b34, &(0x7f0000000300)=""/178) 22:22:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x1f, 0x6, 0x65, 0x5}]}) recvfrom(r0, &(0x7f0000000100)=""/143, 0x8f, 0x10102, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0xb8da, @dev={0xfe, 0x80, [], 0x6}, 0x7ff, 0x3}, 0x80) 22:22:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7a000000) [ 2790.067971][ T8779] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 22:22:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b35, &(0x7f0000000300)=""/178) [ 2790.214726][ T8895] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2790.239059][ T8946] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:38 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x15, 0x10}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:38 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x57a271472d0da0f2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x14, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/144) 22:22:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x81000000) 22:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f0f000]}) 22:22:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b36, &(0x7f0000000300)=""/178) [ 2790.484033][ T9005] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x88a8ffff) 22:22:38 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x300c0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x110) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@ipv4={[], [], @local}, r8}, 0x14) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x8841}, 0x8000000) 22:22:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b37, &(0x7f0000000300)=""/178) 22:22:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x7}}, 0x19, 0x0, &(0x7f0000000040)="cae7c7a49885c055aa4ef45a3fb7f4f6fd9d942c06b2b83c9a"}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 22:22:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x9effffff) 22:22:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3a, &(0x7f0000000300)=""/178) 22:22:39 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x323402, 0x0) [ 2791.176448][ T9335] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 22:22:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf0ffffff) 22:22:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48f0f000]}) 22:22:39 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) shutdown(r1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x8, 0xc0, 0x20, 0x4}, 0x6) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) recvfrom$inet6(r3, &(0x7f0000000180)=""/111, 0x6f, 0x1, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000000)=0x938) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 22:22:39 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8800, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3b, &(0x7f0000000300)=""/178) 22:22:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfcffffff) 22:22:39 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2791.451745][ T9551] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3c, &(0x7f0000000300)=""/178) 22:22:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xffffa888) 22:22:39 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0xa0000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x9}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x440000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x8, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) flock(r3, 0x8) [ 2791.661862][ T9696] FAULT_INJECTION: forcing a failure. [ 2791.661862][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.722800][ T9696] CPU: 1 PID: 9696 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2791.731101][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.741257][ T9696] Call Trace: [ 2791.744572][ T9696] dump_stack+0x197/0x210 [ 2791.749055][ T9696] should_fail.cold+0xa/0x15 [ 2791.753689][ T9696] ? release_sock+0x156/0x1c0 [ 2791.758581][ T9696] ? fault_create_debugfs_attr+0x180/0x180 [ 2791.764571][ T9696] ? ___might_sleep+0x163/0x2c0 22:22:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff0f000]}) [ 2791.769459][ T9696] __should_failslab+0x121/0x190 [ 2791.774424][ T9696] should_failslab+0x9/0x14 [ 2791.779296][ T9696] kmem_cache_alloc_node+0x268/0x740 [ 2791.784745][ T9696] __alloc_skb+0xd5/0x5e0 [ 2791.789108][ T9696] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 2791.794682][ T9696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.800946][ T9696] ? netlink_autobind.isra.0+0x22c/0x310 [ 2791.806612][ T9696] netlink_sendmsg+0xa1b/0xea0 [ 2791.811415][ T9696] ? netlink_unicast+0x7e0/0x7e0 [ 2791.816376][ T9696] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2791.821966][ T9696] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2791.827452][ T9696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.833713][ T9696] ? security_socket_sendmsg+0x8d/0xc0 [ 2791.839196][ T9696] ? netlink_unicast+0x7e0/0x7e0 [ 2791.844151][ T9696] sock_sendmsg+0xd7/0x130 [ 2791.848591][ T9696] ____sys_sendmsg+0x753/0x880 [ 2791.853384][ T9696] ? kernel_sendmsg+0x50/0x50 [ 2791.858079][ T9696] ? __fget_files+0x337/0x520 [ 2791.862806][ T9696] ? find_held_lock+0x35/0x130 [ 2791.867611][ T9696] ___sys_sendmsg+0x100/0x170 [ 2791.872326][ T9696] ? sendmsg_copy_msghdr+0x70/0x70 [ 2791.877454][ T9696] ? __kasan_check_read+0x11/0x20 [ 2791.882503][ T9696] ? __fget_files+0x359/0x520 [ 2791.887214][ T9696] ? ksys_dup3+0x3e0/0x3e0 [ 2791.891670][ T9696] ? __fget_light+0x1ad/0x270 [ 2791.896366][ T9696] ? __fdget+0x1b/0x20 [ 2791.900448][ T9696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2791.906712][ T9696] __sys_sendmsg+0x105/0x1d0 [ 2791.911412][ T9696] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2791.916481][ T9696] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2791.921954][ T9696] ? do_syscall_64+0x26/0x790 [ 2791.926637][ T9696] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2791.932714][ T9696] ? do_syscall_64+0x26/0x790 [ 2791.937418][ T9696] __x64_sys_sendmsg+0x78/0xb0 [ 2791.942206][ T9696] do_syscall_64+0xfa/0x790 [ 2791.946842][ T9696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2791.952770][ T9696] RIP: 0033:0x45b399 [ 2791.956680][ T9696] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2791.976385][ T9696] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2791.984819][ T9696] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2791.992812][ T9696] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2792.000797][ T9696] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2792.008783][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 22:22:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3d, &(0x7f0000000300)=""/178) [ 2792.016774][ T9696] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000000 22:22:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfffff000) 22:22:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:22:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70f0f000]}) 22:22:40 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x4, 0x2840) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xffffff7f) 22:22:40 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) bind$netrom(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@default, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) lookup_dcookie(0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5, 0x8, 0x891], 0x3, 0x80000}) 22:22:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xffffff9e) 22:22:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000300)=""/178) 22:22:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b44, &(0x7f0000000300)=""/178) 22:22:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfffffff0) 22:22:40 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x3, 0xcec3, 0x6, 0x6, 0x5, 0x1}) lookup_dcookie(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000100)={{0x3, 0x0, @identifier="208c55b92415f0360058914e5f0ae59e"}}) [ 2792.793235][T10383] FAULT_INJECTION: forcing a failure. [ 2792.793235][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.831852][T10383] CPU: 0 PID: 10383 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2792.840271][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.850351][T10383] Call Trace: [ 2792.853680][T10383] dump_stack+0x197/0x210 [ 2792.858040][T10383] should_fail.cold+0xa/0x15 [ 2792.862662][T10383] ? fault_create_debugfs_attr+0x180/0x180 [ 2792.868499][T10383] ? ___might_sleep+0x163/0x2c0 [ 2792.873394][T10383] __should_failslab+0x121/0x190 [ 2792.878376][T10383] should_failslab+0x9/0x14 [ 2792.882907][T10383] kmem_cache_alloc_node_trace+0x274/0x750 [ 2792.888738][T10383] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2792.894740][T10383] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2792.900580][T10383] __kmalloc_node_track_caller+0x3d/0x70 [ 2792.906241][T10383] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2792.911645][T10383] __alloc_skb+0x10b/0x5e0 [ 2792.916087][T10383] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 2792.921657][T10383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2792.927923][T10383] ? netlink_autobind.isra.0+0x22c/0x310 [ 2792.933596][T10383] netlink_sendmsg+0xa1b/0xea0 [ 2792.938414][T10383] ? netlink_unicast+0x7e0/0x7e0 [ 2792.943375][T10383] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2792.948959][T10383] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2792.954449][T10383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2792.960720][T10383] ? security_socket_sendmsg+0x8d/0xc0 [ 2792.966203][T10383] ? netlink_unicast+0x7e0/0x7e0 [ 2792.971166][T10383] sock_sendmsg+0xd7/0x130 [ 2792.975628][T10383] ____sys_sendmsg+0x753/0x880 [ 2792.980454][T10383] ? kernel_sendmsg+0x50/0x50 [ 2792.985158][T10383] ? __fget_files+0x337/0x520 [ 2792.989857][T10383] ? find_held_lock+0x35/0x130 [ 2792.994669][T10383] ___sys_sendmsg+0x100/0x170 [ 2792.999368][T10383] ? sendmsg_copy_msghdr+0x70/0x70 [ 2793.004520][T10383] ? __kasan_check_read+0x11/0x20 [ 2793.009570][T10383] ? __fget_files+0x359/0x520 [ 2793.014276][T10383] ? ksys_dup3+0x3e0/0x3e0 [ 2793.018729][T10383] ? __fget_light+0x1ad/0x270 [ 2793.023436][T10383] ? __fdget+0x1b/0x20 [ 2793.027548][T10383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2793.033823][T10383] __sys_sendmsg+0x105/0x1d0 [ 2793.038439][T10383] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2793.043519][T10383] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2793.049020][T10383] ? do_syscall_64+0x26/0x790 [ 2793.053717][T10383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2793.059797][T10383] ? do_syscall_64+0x26/0x790 [ 2793.064508][T10383] __x64_sys_sendmsg+0x78/0xb0 [ 2793.069294][T10383] do_syscall_64+0xfa/0x790 [ 2793.073816][T10383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2793.079720][T10383] RIP: 0033:0x45b399 [ 2793.083631][T10383] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2793.103243][T10383] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2793.111671][T10383] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2793.119656][T10383] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2793.127641][T10383] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2793.135644][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 22:22:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) lookup_dcookie(0x0, 0x0, 0x0) 22:22:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000300)=""/178) 22:22:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) [ 2793.143626][T10383] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000001 22:22:41 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfffffffc) 22:22:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000300)=""/178) 22:22:41 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x38}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)={0x7, 0xb, 0x4, 0x80000000, 0xdff, {}, {0x1, 0x0, 0xcc, 0xa8, 0x80, 0x1f, "9a1fdd63"}, 0x7, 0x2, @planes=&(0x7f00000001c0)={0x1, 0x4, @userptr=0x5, 0x40}, 0x16, 0x0, r4}) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r7, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r8 = getpgrp(0x0) setpriority(0x0, r8, 0xffff) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r9, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) sendmsg$can_j1939(r9, &(0x7f00000015c0)={&(0x7f0000001480)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x2}, 0xfd}, 0x18, &(0x7f0000001580)={&(0x7f00000014c0)="c00a5a3015d0c5afca25da4de4c0c95b7635fb7147436b815b3b7c3342a335f778a24b2815bfee29e7b786dfda6990493a278a98b0056d0e09e4135bd385cc3b6c90e98fbb714dd8f03df026949038959bb6b1e46057ecb1a7edf13864c5c3721da49360e0d099d9c2d00d1be1f69a79452dd02b38935ee099e19dd90e96a311c2327fc41f23c48a4beb3d54a349b589eb8ff69f95a5692cc25a0f58dbac2f6e42c761c52ec03ea15058b2c7f3c97709783cd557", 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4004805) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, 0x84) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14cc1a7c", @ANYRES16=r2, @ANYBLOB="200028bd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r7, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r8, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r10, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0003000000"], 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x22083) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pread64(r12, &(0x7f0000000480)=""/4096, 0x1000, 0x6) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "62c54eaffd8590b78dd350024ed37560e66667c2"}, 0x15, 0x1) bind$isdn_base(r11, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 22:22:41 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 2793.492236][T10730] FAULT_INJECTION: forcing a failure. [ 2793.492236][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.523731][T10730] CPU: 1 PID: 10730 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2793.532117][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.542211][T10730] Call Trace: [ 2793.545522][T10730] dump_stack+0x197/0x210 [ 2793.549879][T10730] should_fail.cold+0xa/0x15 [ 2793.554498][T10730] ? fault_create_debugfs_attr+0x180/0x180 [ 2793.560350][T10730] __should_failslab+0x121/0x190 [ 2793.565337][T10730] should_failslab+0x9/0x14 [ 2793.569855][T10730] kmem_cache_alloc+0x47/0x710 [ 2793.574640][T10730] ? lock_acquire+0x190/0x410 [ 2793.579338][T10730] ? netlink_deliver_tap+0x145/0xbf0 [ 2793.584638][T10730] skb_clone+0x154/0x3d0 [ 2793.588903][T10730] netlink_deliver_tap+0x94f/0xbf0 [ 2793.594146][T10730] netlink_unicast+0x655/0x7e0 [ 2793.598944][T10730] ? netlink_attachskb+0x870/0x870 [ 2793.604077][T10730] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2793.609806][T10730] ? __check_object_size+0x3d/0x437 [ 2793.615031][T10730] netlink_sendmsg+0x91c/0xea0 [ 2793.619818][T10730] ? netlink_unicast+0x7e0/0x7e0 [ 2793.624764][T10730] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2793.630326][T10730] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2793.635813][T10730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2793.642065][T10730] ? security_socket_sendmsg+0x8d/0xc0 [ 2793.647534][T10730] ? netlink_unicast+0x7e0/0x7e0 [ 2793.652483][T10730] sock_sendmsg+0xd7/0x130 [ 2793.656914][T10730] ____sys_sendmsg+0x753/0x880 [ 2793.661698][T10730] ? kernel_sendmsg+0x50/0x50 [ 2793.666388][T10730] ? __fget_files+0x337/0x520 [ 2793.671080][T10730] ? find_held_lock+0x35/0x130 [ 2793.675874][T10730] ___sys_sendmsg+0x100/0x170 [ 2793.680569][T10730] ? sendmsg_copy_msghdr+0x70/0x70 [ 2793.685693][T10730] ? __kasan_check_read+0x11/0x20 [ 2793.690732][T10730] ? __fget_files+0x359/0x520 [ 2793.695437][T10730] ? ksys_dup3+0x3e0/0x3e0 [ 2793.699876][T10730] ? __fget_light+0x1ad/0x270 [ 2793.704563][T10730] ? __fdget+0x1b/0x20 [ 2793.708640][T10730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2793.714895][T10730] __sys_sendmsg+0x105/0x1d0 [ 2793.719494][T10730] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2793.724553][T10730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2793.730023][T10730] ? do_syscall_64+0x26/0x790 [ 2793.734709][T10730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2793.740777][T10730] ? do_syscall_64+0x26/0x790 [ 2793.745473][T10730] __x64_sys_sendmsg+0x78/0xb0 [ 2793.750258][T10730] do_syscall_64+0xfa/0x790 [ 2793.754792][T10730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2793.760687][T10730] RIP: 0033:0x45b399 [ 2793.764589][T10730] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2793.784196][T10730] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 22:22:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 22:22:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b47, &(0x7f0000000300)=""/178) [ 2793.792622][T10730] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2793.800708][T10730] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2793.808687][T10730] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2793.816668][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2793.824647][T10730] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000002 22:22:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf0ffffffffffff) 22:22:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b48, &(0x7f0000000300)=""/178) 22:22:42 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x0, 0x3, 0x4, 0x4, '\x00', 0xfffffffa}) 22:22:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 22:22:42 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write(r4, &(0x7f0000000140)="206a0a6e61a7838b", 0x8) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:42 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x100000000000000) 22:22:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 22:22:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000300)=""/178) 22:22:42 executing program 0: lookup_dcookie(0x80009, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x100, 0xc, 0x4, 0x80000, 0x3ff, {0x77359400}, {0x3, 0xc, 0x1, 0x0, 0x8, 0xff, "dc47d20b"}, 0x3ff, 0x2, @userptr=0x2, 0x4, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 2794.514925][T11073] validate_nla: 2 callbacks suppressed [ 2794.514940][T11073] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2794.537063][T11077] FAULT_INJECTION: forcing a failure. [ 2794.537063][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.571388][T11099] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2794.609364][T11077] CPU: 0 PID: 11077 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2794.617750][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.627829][T11077] Call Trace: [ 2794.631172][T11077] dump_stack+0x197/0x210 [ 2794.635525][T11077] should_fail.cold+0xa/0x15 [ 2794.640141][T11077] ? fault_create_debugfs_attr+0x180/0x180 [ 2794.645966][T11077] ? ___might_sleep+0x163/0x2c0 [ 2794.650857][T11077] __should_failslab+0x121/0x190 [ 2794.655844][T11077] should_failslab+0x9/0x14 [ 2794.660462][T11077] kmem_cache_alloc_trace+0x2d3/0x790 [ 2794.665842][T11077] ? rcu_read_lock_held+0x9c/0xb0 [ 2794.670882][T11077] ? __kasan_check_read+0x11/0x20 [ 2794.676012][T11077] ip_set_create+0x486/0x1500 [ 2794.680714][T11077] ? ip_set_destroy+0xb70/0xb70 [ 2794.685634][T11077] ? ip_set_destroy+0xb70/0xb70 [ 2794.690650][T11077] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 2794.695622][T11077] ? nfnetlink_bind+0x2c0/0x2c0 [ 2794.700480][T11077] ? find_held_lock+0x35/0x130 [ 2794.705279][T11077] ? __local_bh_enable_ip+0x15a/0x270 [ 2794.710732][T11077] ? __dev_queue_xmit+0x175c/0x35c0 [ 2794.715971][T11077] ? __local_bh_enable_ip+0x15a/0x270 [ 2794.720880][T11270] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2794.721348][T11077] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2794.734797][T11077] ? __dev_queue_xmit+0x172e/0x35c0 [ 2794.740006][T11077] ? trace_hardirqs_on+0x67/0x240 [ 2794.745039][T11077] ? __dev_queue_xmit+0x172e/0x35c0 [ 2794.750257][T11077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2794.750775][T11285] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2794.756509][T11077] ? apparmor_capable+0x497/0x900 [ 2794.756532][T11077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2794.756550][T11077] ? __kasan_check_read+0x11/0x20 [ 2794.756567][T11077] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2794.756602][T11077] netlink_rcv_skb+0x177/0x450 [ 2794.791312][T11077] ? nfnetlink_bind+0x2c0/0x2c0 [ 2794.796183][T11077] ? netlink_ack+0xb50/0xb50 [ 2794.800791][T11077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2794.807097][T11077] ? ns_capable_common+0x93/0x100 [ 2794.812148][T11077] ? ns_capable+0x20/0x30 [ 2794.816511][T11077] ? __netlink_ns_capable+0x104/0x140 [ 2794.821899][T11077] nfnetlink_rcv+0x1ba/0x460 [ 2794.826502][T11077] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2794.831969][T11077] ? netlink_deliver_tap+0x248/0xbf0 [ 2794.837278][T11077] netlink_unicast+0x59e/0x7e0 [ 2794.842082][T11077] ? netlink_attachskb+0x870/0x870 [ 2794.847204][T11077] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2794.852931][T11077] ? __check_object_size+0x3d/0x437 [ 2794.858144][T11077] netlink_sendmsg+0x91c/0xea0 [ 2794.862936][T11077] ? netlink_unicast+0x7e0/0x7e0 [ 2794.867884][T11077] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2794.873442][T11077] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2794.878915][T11077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2794.880819][T11508] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2794.885157][T11077] ? security_socket_sendmsg+0x8d/0xc0 [ 2794.885176][T11077] ? netlink_unicast+0x7e0/0x7e0 [ 2794.885195][T11077] sock_sendmsg+0xd7/0x130 [ 2794.885213][T11077] ____sys_sendmsg+0x753/0x880 [ 2794.885235][T11077] ? kernel_sendmsg+0x50/0x50 [ 2794.917636][T11077] ? __fget_files+0x337/0x520 [ 2794.922328][T11077] ? find_held_lock+0x35/0x130 [ 2794.927122][T11077] ___sys_sendmsg+0x100/0x170 [ 2794.931813][T11077] ? sendmsg_copy_msghdr+0x70/0x70 [ 2794.936930][T11077] ? __kasan_check_read+0x11/0x20 [ 2794.941973][T11077] ? __fget_files+0x359/0x520 [ 2794.946676][T11077] ? ksys_dup3+0x3e0/0x3e0 [ 2794.951123][T11077] ? __fget_light+0x1ad/0x270 [ 2794.955819][T11077] ? __fdget+0x1b/0x20 [ 2794.959904][T11077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2794.966179][T11077] __sys_sendmsg+0x105/0x1d0 22:22:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x200000000000000) 22:22:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) accept$alg(r0, 0x0, 0x0) lookup_dcookie(0x0, 0x0, 0x0) 22:22:42 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48000, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x402000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x26b000000000000) 22:22:42 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) lookup_dcookie(0xffe, 0x0, 0x0) 22:22:42 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) readahead(r0, 0x7fff, 0x1000) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x300000000000000) [ 2794.970797][T11077] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2794.975871][T11077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2794.981349][T11077] ? do_syscall_64+0x26/0x790 [ 2794.986042][T11077] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2794.992123][T11077] ? do_syscall_64+0x26/0x790 [ 2794.996832][T11077] __x64_sys_sendmsg+0x78/0xb0 [ 2795.001619][T11077] do_syscall_64+0xfa/0x790 [ 2795.006152][T11077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2795.012054][T11077] RIP: 0033:0x45b399 [ 2795.013058][T11568] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2795.015957][T11077] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2795.015967][T11077] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2795.015984][T11077] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2795.015995][T11077] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2795.016006][T11077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2795.016017][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2795.016026][T11077] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000003 22:22:43 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4b, &(0x7f0000000300)=""/178) [ 2795.398282][T11640] FAULT_INJECTION: forcing a failure. [ 2795.398282][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.466840][T11595] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2795.468667][T11640] CPU: 1 PID: 11640 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2795.483379][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.493445][T11640] Call Trace: [ 2795.496769][T11640] dump_stack+0x197/0x210 [ 2795.501132][T11640] should_fail.cold+0xa/0x15 [ 2795.505756][T11640] ? fault_create_debugfs_attr+0x180/0x180 [ 2795.511582][T11640] ? ___might_sleep+0x163/0x2c0 [ 2795.516459][T11640] __should_failslab+0x121/0x190 [ 2795.521408][T11640] should_failslab+0x9/0x14 [ 2795.525919][T11640] kmem_cache_alloc_trace+0x2d3/0x790 [ 2795.531389][T11640] hash_netiface_create+0x378/0xa60 [ 2795.536600][T11640] ? __find_set_type_get+0x1c7/0x3e0 [ 2795.541909][T11640] ? hash_netiface4_list+0x13b0/0x13b0 [ 2795.547378][T11640] ip_set_create+0x6f1/0x1500 [ 2795.552091][T11640] ? ip_set_destroy+0xb70/0xb70 [ 2795.557010][T11640] ? ip_set_destroy+0xb70/0xb70 [ 2795.561871][T11640] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 2795.566840][T11640] ? nfnetlink_bind+0x2c0/0x2c0 [ 2795.571696][T11640] ? find_held_lock+0x35/0x130 [ 2795.576483][T11640] ? __local_bh_enable_ip+0x15a/0x270 [ 2795.581865][T11640] ? __dev_queue_xmit+0x175c/0x35c0 [ 2795.587072][T11640] ? __local_bh_enable_ip+0x15a/0x270 [ 2795.592453][T11640] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2795.597756][T11640] ? __dev_queue_xmit+0x172e/0x35c0 [ 2795.602956][T11640] ? trace_hardirqs_on+0x67/0x240 [ 2795.607991][T11640] ? __dev_queue_xmit+0x172e/0x35c0 [ 2795.613199][T11640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2795.619443][T11640] ? apparmor_capable+0x497/0x900 [ 2795.624471][T11640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2795.630713][T11640] ? __kasan_check_read+0x11/0x20 [ 2795.635753][T11640] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2795.641225][T11640] netlink_rcv_skb+0x177/0x450 [ 2795.646105][T11640] ? nfnetlink_bind+0x2c0/0x2c0 [ 2795.650967][T11640] ? netlink_ack+0xb50/0xb50 [ 2795.655561][T11640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2795.661821][T11640] ? ns_capable_common+0x93/0x100 [ 2795.666851][T11640] ? ns_capable+0x20/0x30 [ 2795.671187][T11640] ? __netlink_ns_capable+0x104/0x140 [ 2795.676577][T11640] nfnetlink_rcv+0x1ba/0x460 [ 2795.681176][T11640] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2795.686733][T11640] ? netlink_deliver_tap+0x248/0xbf0 [ 2795.692043][T11640] netlink_unicast+0x59e/0x7e0 [ 2795.696825][T11640] ? netlink_attachskb+0x870/0x870 [ 2795.701949][T11640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2795.707702][T11640] ? __check_object_size+0x3d/0x437 [ 2795.712923][T11640] netlink_sendmsg+0x91c/0xea0 [ 2795.717709][T11640] ? netlink_unicast+0x7e0/0x7e0 [ 2795.722661][T11640] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2795.728222][T11640] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2795.733686][T11640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2795.739935][T11640] ? security_socket_sendmsg+0x8d/0xc0 [ 2795.745400][T11640] ? netlink_unicast+0x7e0/0x7e0 [ 2795.750361][T11640] sock_sendmsg+0xd7/0x130 [ 2795.754806][T11640] ____sys_sendmsg+0x753/0x880 [ 2795.759590][T11640] ? kernel_sendmsg+0x50/0x50 [ 2795.764282][T11640] ? __fget_files+0x337/0x520 [ 2795.769089][T11640] ? find_held_lock+0x35/0x130 [ 2795.773881][T11640] ___sys_sendmsg+0x100/0x170 [ 2795.778577][T11640] ? sendmsg_copy_msghdr+0x70/0x70 [ 2795.783696][T11640] ? __kasan_check_read+0x11/0x20 [ 2795.788740][T11640] ? __fget_files+0x359/0x520 [ 2795.793443][T11640] ? ksys_dup3+0x3e0/0x3e0 [ 2795.797888][T11640] ? __fget_light+0x1ad/0x270 [ 2795.802576][T11640] ? __fdget+0x1b/0x20 [ 2795.806655][T11640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2795.812914][T11640] __sys_sendmsg+0x105/0x1d0 [ 2795.817515][T11640] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2795.822570][T11640] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2795.828039][T11640] ? do_syscall_64+0x26/0x790 [ 2795.832722][T11640] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2795.838900][T11640] ? do_syscall_64+0x26/0x790 [ 2795.843594][T11640] __x64_sys_sendmsg+0x78/0xb0 [ 2795.848375][T11640] do_syscall_64+0xfa/0x790 [ 2795.852897][T11640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2795.858814][T11640] RIP: 0033:0x45b399 [ 2795.862712][T11640] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2795.882431][T11640] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2795.890853][T11640] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2795.898834][T11640] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2795.906825][T11640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:22:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 22:22:43 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) 22:22:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4c, &(0x7f0000000300)=""/178) 22:22:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x400000000000000) [ 2795.914806][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2795.922797][T11640] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000004 22:22:43 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x62001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4d, &(0x7f0000000300)=""/178) 22:22:44 executing program 2 (fault-call:1 fault-nth:5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2796.037639][T11765] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x500000000000000) [ 2796.204595][T11773] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2796.243509][T11775] FAULT_INJECTION: forcing a failure. [ 2796.243509][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.284120][T11775] CPU: 1 PID: 11775 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2796.292499][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.302674][T11775] Call Trace: [ 2796.305983][T11775] dump_stack+0x197/0x210 [ 2796.310343][T11775] should_fail.cold+0xa/0x15 [ 2796.314960][T11775] ? fault_create_debugfs_attr+0x180/0x180 [ 2796.320797][T11775] ? ___might_sleep+0x163/0x2c0 [ 2796.321504][T11839] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2796.325677][T11775] __should_failslab+0x121/0x190 [ 2796.325699][T11775] should_failslab+0x9/0x14 [ 2796.325714][T11775] __kmalloc+0x2e0/0x770 [ 2796.325733][T11775] ? kmem_cache_alloc_trace+0x397/0x790 [ 2796.325751][T11775] ? ip_set_alloc+0x38/0x5e [ 2796.325774][T11775] ip_set_alloc+0x38/0x5e [ 2796.325797][T11775] hash_netiface_create+0x413/0xa60 [ 2796.367150][T11775] ? hash_netiface4_list+0x13b0/0x13b0 [ 2796.372630][T11775] ip_set_create+0x6f1/0x1500 [ 2796.377330][T11775] ? ip_set_destroy+0xb70/0xb70 [ 2796.382252][T11775] ? ip_set_destroy+0xb70/0xb70 [ 2796.387244][T11775] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 2796.392288][T11775] ? nfnetlink_bind+0x2c0/0x2c0 [ 2796.397164][T11775] ? find_held_lock+0x35/0x130 [ 2796.401962][T11775] ? __local_bh_enable_ip+0x15a/0x270 [ 2796.407353][T11775] ? __dev_queue_xmit+0x175c/0x35c0 [ 2796.412562][T11775] ? __local_bh_enable_ip+0x15a/0x270 [ 2796.417945][T11775] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2796.423247][T11775] ? __dev_queue_xmit+0x172e/0x35c0 [ 2796.428457][T11775] ? trace_hardirqs_on+0x67/0x240 [ 2796.433486][T11775] ? __dev_queue_xmit+0x172e/0x35c0 [ 2796.438701][T11775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.444961][T11775] ? apparmor_capable+0x497/0x900 [ 2796.450006][T11775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.456257][T11775] ? __kasan_check_read+0x11/0x20 [ 2796.461295][T11775] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2796.466793][T11775] netlink_rcv_skb+0x177/0x450 [ 2796.471581][T11775] ? nfnetlink_bind+0x2c0/0x2c0 [ 2796.476453][T11775] ? netlink_ack+0xb50/0xb50 [ 2796.481058][T11775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.487312][T11775] ? ns_capable_common+0x93/0x100 [ 2796.492358][T11775] ? ns_capable+0x20/0x30 [ 2796.496698][T11775] ? __netlink_ns_capable+0x104/0x140 [ 2796.502183][T11775] nfnetlink_rcv+0x1ba/0x460 [ 2796.506790][T11775] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2796.512288][T11775] ? netlink_deliver_tap+0x248/0xbf0 [ 2796.517604][T11775] netlink_unicast+0x59e/0x7e0 [ 2796.522394][T11775] ? netlink_attachskb+0x870/0x870 [ 2796.527523][T11775] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2796.533252][T11775] ? __check_object_size+0x3d/0x437 [ 2796.538474][T11775] netlink_sendmsg+0x91c/0xea0 [ 2796.543258][T11775] ? netlink_unicast+0x7e0/0x7e0 [ 2796.548209][T11775] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2796.553773][T11775] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2796.559253][T11775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.565511][T11775] ? security_socket_sendmsg+0x8d/0xc0 [ 2796.570991][T11775] ? netlink_unicast+0x7e0/0x7e0 [ 2796.575943][T11775] sock_sendmsg+0xd7/0x130 [ 2796.580374][T11775] ____sys_sendmsg+0x753/0x880 22:22:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x600000000000000) 22:22:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4e, &(0x7f0000000300)=""/178) 22:22:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001]}) [ 2796.585160][T11775] ? kernel_sendmsg+0x50/0x50 [ 2796.589880][T11775] ? __fget_files+0x337/0x520 [ 2796.594571][T11775] ? find_held_lock+0x35/0x130 [ 2796.599366][T11775] ___sys_sendmsg+0x100/0x170 [ 2796.604056][T11775] ? sendmsg_copy_msghdr+0x70/0x70 [ 2796.609178][T11775] ? __kasan_check_read+0x11/0x20 [ 2796.614224][T11775] ? __fget_files+0x359/0x520 [ 2796.618931][T11775] ? ksys_dup3+0x3e0/0x3e0 [ 2796.623385][T11775] ? __fget_light+0x1ad/0x270 [ 2796.628111][T11775] ? __fdget+0x1b/0x20 [ 2796.632203][T11775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2796.638472][T11775] __sys_sendmsg+0x105/0x1d0 [ 2796.643082][T11775] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2796.648159][T11775] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2796.653635][T11775] ? do_syscall_64+0x26/0x790 [ 2796.658326][T11775] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2796.664406][T11775] ? do_syscall_64+0x26/0x790 [ 2796.669107][T11775] __x64_sys_sendmsg+0x78/0xb0 [ 2796.673893][T11775] do_syscall_64+0xfa/0x790 [ 2796.678412][T11775] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:22:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x700000000000000) [ 2796.684306][T11775] RIP: 0033:0x45b399 [ 2796.688207][T11775] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2796.707816][T11775] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2796.716240][T11775] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2796.724221][T11775] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 22:22:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000300)=""/178) [ 2796.732216][T11775] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2796.740198][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2796.748183][T11775] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000005 22:22:44 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r6, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f00000002c0)='./file1\x00', r6}, 0x10) mount$9p_virtio(&(0x7f0000000140)='syz\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x44401, &(0x7f0000000380)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x4}}, {@access_any='access=any'}], [{@measure='measure'}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r4}}, {@permit_directio='permit_directio'}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xa00000000000000) 22:22:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b60, &(0x7f0000000300)=""/178) 22:22:44 executing program 2 (fault-call:1 fault-nth:6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xc00000000000000) 22:22:45 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xfffffffe}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8018}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80, r3, 0x7d01a22eff5e04b0, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x786}, @NBD_ATTR_SOCKETS={0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000880}, 0xabf2f74ceb9ddf1f) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x400c800) 22:22:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b61, &(0x7f0000000300)=""/178) 22:22:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xe00000000000000) [ 2797.300768][T11996] FAULT_INJECTION: forcing a failure. [ 2797.300768][T11996] name failslab, interval 1, probability 0, space 0, times 0 22:22:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 22:22:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b62, &(0x7f0000000300)=""/178) [ 2797.338172][ T28] audit: type=1800 audit(1580509365.279:60): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_sys" dev="sda1" ino=16799 res=0 [ 2797.383880][T11996] CPU: 0 PID: 11996 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 22:22:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050096b94007a2a3b61d000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newneigh={0x2c, 0x1c, 0x200, 0x70bd26, 0x5, {0x7, 0x0, 0x0, r6, 0x4, 0x1, 0x1}, [@NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_PROBES={0x8, 0x4, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 2797.392351][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.402417][T11996] Call Trace: [ 2797.405727][T11996] dump_stack+0x197/0x210 [ 2797.410083][T11996] should_fail.cold+0xa/0x15 [ 2797.414688][T11996] ? wait_for_completion+0x440/0x440 [ 2797.419976][T11996] ? fault_create_debugfs_attr+0x180/0x180 [ 2797.425797][T11996] ? ___might_sleep+0x163/0x2c0 [ 2797.430673][T11996] __should_failslab+0x121/0x190 [ 2797.435636][T11996] should_failslab+0x9/0x14 [ 2797.440157][T11996] kmem_cache_alloc_node+0x268/0x740 [ 2797.445478][T11996] __alloc_skb+0xd5/0x5e0 [ 2797.449832][T11996] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 2797.455393][T11996] ? __lock_acquire+0x16f2/0x4a00 [ 2797.460430][T11996] ? preempt_schedule+0x4b/0x60 [ 2797.465295][T11996] ? ___preempt_schedule+0x16/0x18 [ 2797.470427][T11996] netlink_ack+0x25c/0xb50 [ 2797.474896][T11996] ? netlink_sendmsg+0xea0/0xea0 [ 2797.479888][T11996] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2797.485370][T11996] netlink_rcv_skb+0x376/0x450 [ 2797.490134][T11996] ? nfnetlink_bind+0x2c0/0x2c0 [ 2797.494995][T11996] ? netlink_ack+0xb50/0xb50 [ 2797.499607][T11996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2797.505857][T11996] ? ns_capable_common+0x93/0x100 [ 2797.510900][T11996] ? ns_capable+0x20/0x30 [ 2797.515246][T11996] ? __netlink_ns_capable+0x104/0x140 [ 2797.520642][T11996] nfnetlink_rcv+0x1ba/0x460 [ 2797.525251][T11996] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2797.530723][T11996] ? netlink_deliver_tap+0x248/0xbf0 [ 2797.536037][T11996] netlink_unicast+0x59e/0x7e0 [ 2797.540826][T11996] ? netlink_attachskb+0x870/0x870 [ 2797.545973][T11996] ? __sanitizer_cov_trace_cmp8+0x18/0x20 22:22:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b63, &(0x7f0000000300)=""/178) [ 2797.551708][T11996] ? __check_object_size+0x3d/0x437 [ 2797.556929][T11996] netlink_sendmsg+0x91c/0xea0 [ 2797.561719][T11996] ? netlink_unicast+0x7e0/0x7e0 [ 2797.566666][T11996] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2797.572230][T11996] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2797.577723][T11996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2797.583980][T11996] ? security_socket_sendmsg+0x8d/0xc0 [ 2797.589452][T11996] ? netlink_unicast+0x7e0/0x7e0 [ 2797.594410][T11996] sock_sendmsg+0xd7/0x130 [ 2797.598841][T11996] ____sys_sendmsg+0x753/0x880 [ 2797.603612][T11996] ? kernel_sendmsg+0x50/0x50 [ 2797.608299][T11996] ? __fget_files+0x337/0x520 [ 2797.612994][T11996] ? find_held_lock+0x35/0x130 [ 2797.617803][T11996] ___sys_sendmsg+0x100/0x170 [ 2797.622502][T11996] ? sendmsg_copy_msghdr+0x70/0x70 [ 2797.627631][T11996] ? __kasan_check_read+0x11/0x20 [ 2797.632677][T11996] ? __fget_files+0x359/0x520 [ 2797.637499][T11996] ? ksys_dup3+0x3e0/0x3e0 [ 2797.641950][T11996] ? __fget_light+0x1ad/0x270 [ 2797.646649][T11996] ? __fdget+0x1b/0x20 [ 2797.650736][T11996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2797.657004][T11996] __sys_sendmsg+0x105/0x1d0 [ 2797.661608][T11996] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2797.666666][T11996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2797.672146][T11996] ? do_syscall_64+0x26/0x790 [ 2797.676957][T11996] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2797.683037][T11996] ? do_syscall_64+0x26/0x790 [ 2797.687745][T11996] __x64_sys_sendmsg+0x78/0xb0 [ 2797.692524][T11996] do_syscall_64+0xfa/0x790 [ 2797.697047][T11996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2797.702944][T11996] RIP: 0033:0x45b399 [ 2797.706844][T11996] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2797.727404][T11996] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2797.735826][T11996] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2797.743896][T11996] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2797.751882][T11996] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2797.759866][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2797.767850][T11996] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000006 22:22:45 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4ee200, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b64, &(0x7f0000000300)=""/178) 22:22:45 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0xefad, 0x2, 0x4, 0xe000, 0x5, {}, {0x1, 0xc, 0x30, 0x7, 0x8, 0x0, "ef10167e"}, 0x5, 0x2, @planes=&(0x7f0000000000)={0x1, 0x3, @userptr=0x4d, 0x85}, 0x8fdd, 0x0, r1}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x3, 0x1, &(0x7f00000000c0)}) ioperm(0x5211000000000000, 0xfff, 0x401) 22:22:46 executing program 2 (fault-call:1 fault-nth:7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf00000000000000) 22:22:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b65, &(0x7f0000000300)=""/178) 22:22:46 executing program 0: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg$sock(r3, &(0x7f0000000700)=[{{&(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x38, 0x3, "d5c6ed3dbce8390daa3e762157adeffa76fe8affadcad569308fd73ba7d787a87400968843fa1f55ae58137a8f046fab5d84d575638a6876d370cee1f8fe17", 0x35}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)="742b97d94dbed97121c46d31e1095921966aea740862690a3f8502317d05dd83f4551c5c0c28cca5e51217314b5499df01f99228f8d4e295714235209b48c49593708e8c1e98bae78b2d724e48dfce18d6f81a8dcd9d686c95290fee13728f5dd03185c7ed315897816a946ae5f3e8644f71a9bfc834", 0x76}, {&(0x7f0000000500)="fd057bbf94439b5e5a841cc2146a0dabd9e87455e0291fbb27a7098a91a327f7cdaa84530279eddaec1426060cb14a30ef2e3e0c13bc0939ddec1b72df5ccfc58816be6c1715d0207554e9c14ed9a49d89bb374c70c49f42428ad269d326d500b2c6dcc4eb86a763cfc25a3e2c4a96d3d5396076c8f402f6129d746467f367033acf93e67c72bfbae9f2ed44c382ea2c12", 0x91}, {&(0x7f00000005c0)="48b960c3470c018f8569bcff8c3a5aa95ad8f05ab73bc696f40e321003a526016943aae988e73eab4fc4786dd231e376ee589741aecd4bb0628aed615392f18ad0158c5b756993685fbf5d48267fc50524f44a4f1e27fd83f2c289e6b239d37b8c4d8556c6447b94fe271dce506b97819930110013761000bf7ac0b0064752edfc64ddfe2a0739d0ead058e90c233b044e69f07c98d6e5ca8cebc7c7f6620fc201f71b56d7b37c8ae2fc1d50ff5aab78e20c57f2e76c4cbaa80d876267fc36e42344618d3c2bbe9b99421d1f5171a6856b61b20867c28a0e768f9606aed752529ef484165161fa575a61b647eb06e3ecc634a9d8", 0xf4}], 0x3}}], 0x1, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0xf6a, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2c31a6b41fae037dd364135a1d5ca63fc5", 0x11, 0x9}, {&(0x7f0000000100)="96a433d154098cbdb75344c48d356d4ecd4fdd2b0f7c21d534f754752722f7adbe1f93a0cc6a9f755f1d0c74d88952abc1161962506a0f6334eadef8c47fa5e809e1244bba1de4d99eb153c86e4b7ce87e155bcb5004e7f7aa01d10ef1c5555ab4c2dd0b8c00084e65dbace37f4cdcc46601ba79b456073555c74cb136e5005de9bfa09ed6eeb608e2dbf488c4ccf49ab0d1ae9d81a5d16b8b9eaf102ff432a16c2ef101a6d5277464ca7df61b", 0xad, 0x6}], 0x1814420, &(0x7f00000002c0)={[{@huge_advise={'huge=advise', 0x3d, '@'}}, {@huge_advise={'huge=advise', 0x3d, 'vboxnet0'}}, {@huge_within_size={'huge=within_size', 0x3d, '+'}}, {@gid={'gid', 0x3d, r0}}, {@huge_always={'huge=always', 0x3d, 'lo'}}, {@uid={'uid', 0x3d, r2}}], [{@uid_gt={'uid>', r5}}, {@measure='measure'}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, 'wlan0[system)'}}, {@smackfsdef={'smackfsdef', 0x3d, '--posix_acl_access(security@fproc'}}]}) lookup_dcookie(0x851, 0x0, 0x79) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x3b) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r7, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000000)) 22:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x1000000000000000) [ 2798.240581][T12447] FAULT_INJECTION: forcing a failure. [ 2798.240581][T12447] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.286941][T12447] CPU: 1 PID: 12447 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2798.295336][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2798.305414][T12447] Call Trace: [ 2798.308737][T12447] dump_stack+0x197/0x210 [ 2798.313107][T12447] should_fail.cold+0xa/0x15 [ 2798.317721][T12447] ? wait_for_completion+0x440/0x440 [ 2798.323042][T12447] ? fault_create_debugfs_attr+0x180/0x180 [ 2798.328879][T12447] ? ___might_sleep+0x163/0x2c0 [ 2798.333764][T12447] __should_failslab+0x121/0x190 [ 2798.338728][T12447] should_failslab+0x9/0x14 [ 2798.343255][T12447] kmem_cache_alloc_node+0x268/0x740 [ 2798.348577][T12447] __alloc_skb+0xd5/0x5e0 [ 2798.352934][T12447] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 2798.358509][T12447] ? __local_bh_enable_ip+0x15a/0x270 [ 2798.363901][T12447] ? __dev_queue_xmit+0x175c/0x35c0 [ 2798.369118][T12447] ? __local_bh_enable_ip+0x15a/0x270 [ 2798.374511][T12447] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2798.379829][T12447] netlink_ack+0x25c/0xb50 [ 2798.384282][T12447] ? netlink_sendmsg+0xea0/0xea0 [ 2798.389236][T12447] ? __kasan_check_read+0x11/0x20 [ 2798.394274][T12447] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2798.399765][T12447] netlink_rcv_skb+0x376/0x450 [ 2798.404558][T12447] ? nfnetlink_bind+0x2c0/0x2c0 [ 2798.404579][T12447] ? netlink_ack+0xb50/0xb50 [ 2798.404594][T12447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.404609][T12447] ? ns_capable_common+0x93/0x100 [ 2798.404628][T12447] ? ns_capable+0x20/0x30 [ 2798.404643][T12447] ? __netlink_ns_capable+0x104/0x140 [ 2798.404666][T12447] nfnetlink_rcv+0x1ba/0x460 [ 2798.404683][T12447] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2798.404694][T12447] ? netlink_deliver_tap+0x248/0xbf0 [ 2798.404723][T12447] netlink_unicast+0x59e/0x7e0 [ 2798.404748][T12447] ? netlink_attachskb+0x870/0x870 [ 2798.404762][T12447] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2798.404778][T12447] ? __check_object_size+0x3d/0x437 [ 2798.404805][T12447] netlink_sendmsg+0x91c/0xea0 [ 2798.404835][T12447] ? netlink_unicast+0x7e0/0x7e0 [ 2798.404851][T12447] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2798.404875][T12447] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2798.404893][T12447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.404909][T12447] ? security_socket_sendmsg+0x8d/0xc0 [ 2798.404925][T12447] ? netlink_unicast+0x7e0/0x7e0 [ 2798.404944][T12447] sock_sendmsg+0xd7/0x130 [ 2798.404963][T12447] ____sys_sendmsg+0x753/0x880 [ 2798.404985][T12447] ? kernel_sendmsg+0x50/0x50 [ 2798.405001][T12447] ? __fget_files+0x337/0x520 [ 2798.405021][T12447] ? find_held_lock+0x35/0x130 [ 2798.405056][T12447] ___sys_sendmsg+0x100/0x170 [ 2798.405078][T12447] ? sendmsg_copy_msghdr+0x70/0x70 [ 2798.405095][T12447] ? __kasan_check_read+0x11/0x20 [ 2798.405116][T12447] ? __fget_files+0x359/0x520 [ 2798.405143][T12447] ? ksys_dup3+0x3e0/0x3e0 [ 2798.405177][T12447] ? __fget_light+0x1ad/0x270 [ 2798.560802][T12447] ? __fdget+0x1b/0x20 [ 2798.564905][T12447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2798.571172][T12447] __sys_sendmsg+0x105/0x1d0 [ 2798.575777][T12447] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2798.580838][T12447] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2798.586326][T12447] ? do_syscall_64+0x26/0x790 [ 2798.591012][T12447] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2798.597086][T12447] ? do_syscall_64+0x26/0x790 [ 2798.601788][T12447] __x64_sys_sendmsg+0x78/0xb0 [ 2798.606570][T12447] do_syscall_64+0xfa/0x790 [ 2798.611104][T12447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2798.617002][T12447] RIP: 0033:0x45b399 22:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 22:22:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000300)=""/178) 22:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x2000000000000000) 22:22:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b67, &(0x7f0000000300)=""/178) [ 2798.620903][T12447] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2798.640515][T12447] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2798.648941][T12447] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2798.656932][T12447] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2798.664919][T12447] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2798.672902][T12447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2798.680902][T12447] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000007 22:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x3f00000000000000) 22:22:46 executing program 0: lookup_dcookie(0x402, 0x0, 0x0) 22:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 22:22:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b68, &(0x7f0000000300)=""/178) 22:22:46 executing program 2 (fault-call:1 fault-nth:8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:46 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = getpgid(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0xa, 0x5, 0x800, 0x4, '\x00', 0x7f}, 0x0, 0x20000041, 0x9, r4, 0x6, 0x6, 'syz1\x00', &(0x7f0000000680)=['{-:user,\x00', 'user\x00', '\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 'md5summime_typevboxnet1\x00', '/proc/self/net/pfkey\x00', '@]\x00'], 0x14c, [], [0x7fff, 0x260, 0x7fff, 0x5]}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r6, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000380)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:47 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x10080) flistxattr(r0, &(0x7f00000000c0)=""/147, 0x93) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x408000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000180)={0xe, "1cf09f839e4084a9e7a126fd2f32c3aa771fd6795fd5ec07fbe5e1783bdb93ff076c56f771fe8762a5a84083678563d31d9bb5772c6cd40f63ea9d5dada06d621e729dae4e30475f26825686ca093fdb2dd7f71bb8219523b8857ef8c32f432ca52d26786bbab2c77756bf961aea33d5014bb76b2761beafd8ecfabd72013057"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 22:22:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b69, &(0x7f0000000300)=""/178) [ 2799.022030][T12692] FAULT_INJECTION: forcing a failure. [ 2799.022030][T12692] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.101741][T12692] CPU: 1 PID: 12692 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2799.110239][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2799.120401][T12692] Call Trace: [ 2799.123715][T12692] dump_stack+0x197/0x210 [ 2799.128073][T12692] should_fail.cold+0xa/0x15 [ 2799.132694][T12692] ? fault_create_debugfs_attr+0x180/0x180 [ 2799.138523][T12692] ? ___might_sleep+0x163/0x2c0 [ 2799.143399][T12692] __should_failslab+0x121/0x190 [ 2799.148360][T12692] should_failslab+0x9/0x14 [ 2799.152879][T12692] kmem_cache_alloc_node_trace+0x274/0x750 [ 2799.158705][T12692] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2799.164706][T12692] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2799.170544][T12692] __kmalloc_node_track_caller+0x3d/0x70 [ 2799.176192][T12692] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2799.181691][T12692] __alloc_skb+0x10b/0x5e0 [ 2799.186132][T12692] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 2799.191692][T12692] ? __local_bh_enable_ip+0x15a/0x270 [ 2799.197078][T12692] ? __dev_queue_xmit+0x175c/0x35c0 22:22:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4000000000000000) 22:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 2799.202366][T12692] ? __local_bh_enable_ip+0x15a/0x270 [ 2799.207747][T12692] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2799.213176][T12692] netlink_ack+0x25c/0xb50 [ 2799.213209][T12692] ? netlink_sendmsg+0xea0/0xea0 [ 2799.213227][T12692] ? __kasan_check_read+0x11/0x20 [ 2799.213250][T12692] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2799.213276][T12692] netlink_rcv_skb+0x376/0x450 22:22:47 executing program 2 (fault-call:1 fault-nth:9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2799.213293][T12692] ? nfnetlink_bind+0x2c0/0x2c0 22:22:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4800000000000000) 22:22:47 executing program 0: lookup_dcookie(0x3e, 0x0, 0xffffffffffffffe5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @remote}, {0x306, @broadcast}, 0x8, {0x2, 0x4e24, @remote}, 'nr0\x00'}) [ 2799.213314][T12692] ? netlink_ack+0xb50/0xb50 [ 2799.213330][T12692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2799.213347][T12692] ? ns_capable_common+0x93/0x100 [ 2799.213372][T12692] ? ns_capable+0x20/0x30 [ 2799.213389][T12692] ? __netlink_ns_capable+0x104/0x140 22:22:47 executing program 2 (fault-call:1 fault-nth:10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x4c00000000000000) [ 2799.213419][T12692] nfnetlink_rcv+0x1ba/0x460 22:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 2799.213439][T12692] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2799.213456][T12692] ? netlink_deliver_tap+0x248/0xbf0 [ 2799.213493][T12692] netlink_unicast+0x59e/0x7e0 [ 2799.213525][T12692] ? netlink_attachskb+0x870/0x870 22:22:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2799.213546][T12692] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2799.213565][T12692] ? __check_object_size+0x3d/0x437 [ 2799.213591][T12692] netlink_sendmsg+0x91c/0xea0 [ 2799.213619][T12692] ? netlink_unicast+0x7e0/0x7e0 [ 2799.213633][T12692] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2799.213659][T12692] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2799.213677][T12692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2799.213694][T12692] ? security_socket_sendmsg+0x8d/0xc0 [ 2799.213711][T12692] ? netlink_unicast+0x7e0/0x7e0 [ 2799.213730][T12692] sock_sendmsg+0xd7/0x130 [ 2799.213750][T12692] ____sys_sendmsg+0x753/0x880 [ 2799.213774][T12692] ? kernel_sendmsg+0x50/0x50 [ 2799.213792][T12692] ? __fget_files+0x337/0x520 [ 2799.213813][T12692] ? find_held_lock+0x35/0x130 [ 2799.213850][T12692] ___sys_sendmsg+0x100/0x170 [ 2799.213872][T12692] ? sendmsg_copy_msghdr+0x70/0x70 22:22:47 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3f, 0x842) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000001c0)={0x1, "c2a6c66196b4f1253408dbeac0afc80e5bb110eba40ab47f061dd14c19113c51ff5801dbdcd408679bacba765c7c8eaf523c1088364d866371c791ad75ebab90", {0x8, 0x9}}) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) keyctl$get_persistent(0x16, r1, 0xfffffffffffffffc) lookup_dcookie(0x0, 0x0, 0x0) [ 2799.213899][T12692] ? __kasan_check_read+0x11/0x20 [ 2799.213925][T12692] ? __fget_files+0x359/0x520 [ 2799.213954][T12692] ? ksys_dup3+0x3e0/0x3e0 [ 2799.213990][T12692] ? __fget_light+0x1ad/0x270 [ 2799.214011][T12692] ? __fdget+0x1b/0x20 [ 2799.214027][T12692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2799.214051][T12692] __sys_sendmsg+0x105/0x1d0 [ 2799.214068][T12692] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2799.214089][T12692] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2799.214123][T12692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2799.214140][T12692] ? do_syscall_64+0x26/0x790 [ 2799.214156][T12692] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2799.214171][T12692] ? do_syscall_64+0x26/0x790 [ 2799.214197][T12692] __x64_sys_sendmsg+0x78/0xb0 [ 2799.214218][T12692] do_syscall_64+0xfa/0x790 [ 2799.214241][T12692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2799.214253][T12692] RIP: 0033:0x45b399 [ 2799.214269][T12692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2799.214278][T12692] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2799.214293][T12692] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2799.214302][T12692] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2799.214311][T12692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2799.214320][T12692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2799.214329][T12692] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000008 [ 2799.412498][T12812] FAULT_INJECTION: forcing a failure. [ 2799.412498][T12812] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.412524][T12812] CPU: 1 PID: 12812 Comm: syz-executor.2 Not tainted 5.5.0-syzkaller #0 [ 2799.412533][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2799.412539][T12812] Call Trace: [ 2799.412562][T12812] dump_stack+0x197/0x210 [ 2799.412589][T12812] should_fail.cold+0xa/0x15 [ 2799.412613][T12812] ? fault_create_debugfs_attr+0x180/0x180 [ 2799.412651][T12812] __should_failslab+0x121/0x190 [ 2799.412673][T12812] should_failslab+0x9/0x14 [ 2799.412689][T12812] kmem_cache_alloc+0x47/0x710 [ 2799.412710][T12812] ? lock_acquire+0x190/0x410 [ 2799.412726][T12812] ? netlink_deliver_tap+0x145/0xbf0 [ 2799.412749][T12812] skb_clone+0x154/0x3d0 [ 2799.412771][T12812] netlink_deliver_tap+0x94f/0xbf0 [ 2799.412790][T12812] ? __check_heap_object+0x20/0xb3 [ 2799.412816][T12812] __netlink_sendskb+0x62/0xc0 [ 2799.412836][T12812] netlink_unicast+0x6bd/0x7e0 [ 2799.412862][T12812] ? netlink_attachskb+0x870/0x870 [ 2799.412903][T12812] netlink_ack+0x607/0xb50 [ 2799.412930][T12812] ? netlink_sendmsg+0xea0/0xea0 [ 2799.412947][T12812] ? __kasan_check_read+0x11/0x20 [ 2799.412967][T12812] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2799.412994][T12812] netlink_rcv_skb+0x376/0x450 [ 2799.413011][T12812] ? nfnetlink_bind+0x2c0/0x2c0 [ 2799.413031][T12812] ? netlink_ack+0xb50/0xb50 [ 2799.413048][T12812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2799.413065][T12812] ? ns_capable_common+0x93/0x100 [ 2799.413084][T12812] ? ns_capable+0x20/0x30 [ 2799.413101][T12812] ? __netlink_ns_capable+0x104/0x140 [ 2799.413124][T12812] nfnetlink_rcv+0x1ba/0x460 [ 2799.413144][T12812] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 2799.413158][T12812] ? netlink_deliver_tap+0x248/0xbf0 [ 2799.413189][T12812] netlink_unicast+0x59e/0x7e0 [ 2799.413213][T12812] ? netlink_attachskb+0x870/0x870 [ 2799.413230][T12812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2799.413248][T12812] ? __check_object_size+0x3d/0x437 [ 2799.413286][T12812] netlink_sendmsg+0x91c/0xea0 [ 2799.413316][T12812] ? netlink_unicast+0x7e0/0x7e0 [ 2799.413331][T12812] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2799.413353][T12812] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2799.413370][T12812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2799.413385][T12812] ? security_socket_sendmsg+0x8d/0xc0 [ 2799.413399][T12812] ? netlink_unicast+0x7e0/0x7e0 [ 2799.413415][T12812] sock_sendmsg+0xd7/0x130 [ 2799.413433][T12812] ____sys_sendmsg+0x753/0x880 [ 2799.413455][T12812] ? kernel_sendmsg+0x50/0x50 [ 2799.413470][T12812] ? __fget_files+0x337/0x520 [ 2799.413487][T12812] ? find_held_lock+0x35/0x130 [ 2799.413520][T12812] ___sys_sendmsg+0x100/0x170 [ 2799.413541][T12812] ? sendmsg_copy_msghdr+0x70/0x70 [ 2799.413557][T12812] ? __kasan_check_read+0x11/0x20 [ 2799.413580][T12812] ? __fget_files+0x359/0x520 [ 2799.413607][T12812] ? ksys_dup3+0x3e0/0x3e0 [ 2799.413640][T12812] ? __fget_light+0x1ad/0x270 [ 2799.413660][T12812] ? __fdget+0x1b/0x20 [ 2799.413674][T12812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2799.413699][T12812] __sys_sendmsg+0x105/0x1d0 [ 2799.413716][T12812] ? __sys_sendmsg_sock+0xc0/0xc0 [ 2799.413754][T12812] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2799.413770][T12812] ? do_syscall_64+0x26/0x790 [ 2799.413784][T12812] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2799.413798][T12812] ? do_syscall_64+0x26/0x790 [ 2799.413824][T12812] __x64_sys_sendmsg+0x78/0xb0 [ 2799.413844][T12812] do_syscall_64+0xfa/0x790 [ 2799.413867][T12812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2799.413887][T12812] RIP: 0033:0x45b399 [ 2799.413904][T12812] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2799.413912][T12812] RSP: 002b:00007f783c279c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2799.413928][T12812] RAX: ffffffffffffffda RBX: 00007f783c27a6d4 RCX: 000000000045b399 [ 2799.413938][T12812] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 2799.413947][T12812] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2799.413957][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2799.413966][T12812] R13: 0000000000000908 R14: 00000000004ca543 R15: 0000000000000009 [ 2799.698434][T12927] validate_nla: 14 callbacks suppressed [ 2799.698451][T12927] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b6a, &(0x7f0000000300)=""/178) 22:22:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6000000000000000) 22:22:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 22:22:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:48 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x68, 0x29, 0x1, {0x3, [{{0x8, 0x4, 0x6}, 0x4137, 0x1, 0x7, './file0'}, {{0x8, 0x0, 0x7}, 0x6, 0x5, 0x7, './file0'}, {{0x40, 0x4, 0x2}, 0x3f, 0x1, 0x7, './file0'}]}}, 0x68) [ 2800.056591][T13138] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2800.721611][T13244] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:48 executing program 0: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) lookup_dcookie(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x3, 0x7fff, 0x8, 0x800}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 22:22:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6558000000000000) 22:22:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 22:22:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b6b, &(0x7f0000000300)=""/178) 22:22:48 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000280)={0x1}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/169, &(0x7f0000000140)=0xa9) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) [ 2800.995035][T13414] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) 22:22:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6800000000000000) 22:22:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) recvfrom$phonet(r1, &(0x7f0000000180)=""/101, 0x65, 0x40010066, &(0x7f0000000200)={0x23, 0x80, 0x4, 0xf5}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x3}, &(0x7f0000000140)=0x8) [ 2801.205330][T13476] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b6c, &(0x7f0000000300)=""/178) 22:22:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2801.300754][T13492] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 22:22:49 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000001c0)=""/185, &(0x7f0000000140)=0xb9) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x6c00000000000000) 22:22:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b6d, &(0x7f0000000300)=""/178) 22:22:49 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc080, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x0, 0x6, 0x7, 0x3, 0x1, [0x4, 0x1, 0x7eb, 0x1], [0x80000000, 0x10001, 0x3, 0x2], [0x7fff, 0x8, 0xffffff93, 0xfff], [0xffffffff, 0x7, 0x2, 0x200]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000d06010100000000000000000100000965fdf2bcd387d1d53a69702c706f72740000000072cf09e3fe79a06152a39fa73a061b5b4a7faf783fea8306ad9f02d712597fcd08c59c40ea00122cc8c0d5cc92c43b8c626a6f0c11717fc9fb261f83a58f9b2809d056c2213a5089508f275cbc5db6b4c1063edfa611e8c9658ea8b12a26cefa537b95dd8270b7db45bd0813007b0309d32034e671a24bc69d992f1fe26e00c5ed80f6c08b39448bc9f5a5576b81a54bcad0c5661763af58b492bc1dc7129eb6445a3fafb2a64dc701ddee1b8eefdd8d025a250314514806e1d81608cc"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000) 22:22:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2801.649591][T13714] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2801.699258][T13719] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 22:22:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7400000000000000) 22:22:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b70, &(0x7f0000000300)=""/178) 22:22:49 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={@empty, @dev={0xfe, 0x80, [], 0x22}, @ipv4={[], [], @remote}, 0x8, 0x6, 0x33, 0x0, 0x2, 0x220000, r10}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2802.093288][T13940] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b71, &(0x7f0000000300)=""/178) 22:22:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 22:22:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x7a00000000000000) [ 2802.186366][T13944] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:50 executing program 0: lookup_dcookie(0x1000000000000000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000280)="7e69461094028976a72eaa8f59d11a4b571b19a344f94fce5d5670ce00878e0315be65ccf8fb1669f6e0fc931306044dd574ccca376977e1a151bdb3f64511b506e4dcbebcc3c0995da12eabeda25bba082baac70b6abd83fbe2dfde8c8909e952b9f2aef37df5d980bc88002838cb2d59823d697f500e9fcb8800270ca4c86423340fb4867e0c5a94112c2c7d873174ca1e9e3a4a73887fabf3284e7a9eaf0be2feb900125740a5127078f5516a711203444185880cca81006fe6ad8d859c1c61393a63ef34200887a7884ff06f90009d86e90c3f645132835f0f202997e691cbd9ac4c0ca511c84fdf80d4c17cf701f0ed2d6694a2819ae7c4782c2b") sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x1b0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x2, 0x3ff, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1ff, 0xb1, 0xab, 0x6, 0x200]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0x8800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf000000, 0x1, 0x786, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980a71, 0x3, [], @p_u16=&(0x7f0000000000)=0x3ff}}) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x800) 22:22:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b72, &(0x7f0000000300)=""/178) 22:22:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x8100000000000000) 22:22:50 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x8, {0x7, 0x1f, 0x1c09, 0x121f260, 0x6, 0x0, 0x9, 0x4}}, 0x50) memfd_create(&(0x7f0000000140)='{\x00', 0x3) 22:22:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:50 executing program 0: lookup_dcookie(0x7, 0x0, 0xffffffffffffffc5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$TCFLSH(r0, 0x540b, 0x0) 22:22:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 22:22:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4bfa, &(0x7f0000000300)=""/178) 22:22:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x88a8ffff00000000) 22:22:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:50 executing program 0: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) r2 = getpgid(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x14, 0x0, 0x0, 0x0, 0x41bd, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffefffffffffc}, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1001}, {0xffffffffffffffff, 0x4400}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x2040}, {}], 0x5, &(0x7f0000000040), &(0x7f0000000080), 0x8) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x1a1040, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x5, 0x0, 0x0, &(0x7f0000000400)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = inotify_init1(0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents(r5, &(0x7f00000000c0)=""/87, 0x222) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x9, 0x9}, &(0x7f0000001540)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001580)={0x0, 0x9}, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000200)={0x980000, 0x8, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a7d, 0x6, [], @p_u8=&(0x7f0000000140)=0x4}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x45}) pipe2(&(0x7f0000000040), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r7, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540), 0x0, 0x0) lookup_dcookie(0x0, 0x0, 0x0) 22:22:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4bfb, &(0x7f0000000300)=""/178) 22:22:50 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$getown(r4, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x9effffff00000000) 22:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4c01, &(0x7f0000000300)=""/178) 22:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 22:22:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xf0ffffff00000000) 22:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:51 executing program 0: mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x8000, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x8d73}}, {@rq={'rq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x8362}}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@mmap='mmap'}, {@rq={'rq', 0x3d, 0xfffffffffffff000}}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xe08}}, {@sq={'sq', 0x3d, 0x4}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@measure='measure'}, {@obj_user={'obj_user'}}]}}) lookup_dcookie(0x0, 0x0, 0x0) 22:22:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5409, &(0x7f0000000300)=""/178) 22:22:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfcffffff00000000) 22:22:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:52 executing program 0: lookup_dcookie(0x4, 0x0, 0xfffffefa) 22:22:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x540b, &(0x7f0000000300)=""/178) 22:22:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xffffff7f00000000) 22:22:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 22:22:52 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1, 0x0, 0xa}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x320, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000140), {[{{@arp={@multicast2, @remote, 0xff000000, 0x0, 0xe, 0x10, {@mac=@dev={[], 0x35}, {[0xff, 0x0, 0xb1e5bced477d6f16, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff]}}, 0x1, 0x9, 0x8, 0x3, 0x4, 0x1, 'ipvlan0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @remote, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c7f8f1dc62b310c7349964ee27a89632257287f324bf763ec9cbe7dce41a"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) getpgrp(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @local}, &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}]}, 0x54}}, 0x40800) setpriority(0x0, 0x0, 0xffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x3063, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:52 executing program 0: lookup_dcookie(0x6, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x80000000, 0x7fffffff, 0x3, 0x12, "7d6d2400000180000000000000000100f3ff00"}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x41e3, 0xfffff801, 0x24, &(0x7f0000000000)="89ec56a54b041c63465e8ff7c4588a3d1fc108a48f6c35771328df55d15f36fcc0c32660"}) 22:22:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xffffffff00000000) 22:22:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x540c, &(0x7f0000000300)=""/178) 22:22:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:52 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x1ff, 0x6, 0x4, 0x20000, 0x7fff, {r1, r2/1000+30000}, {0x5, 0x9, 0x2, 0x6, 0xff, 0x7f, "0516cf65"}, 0x100, 0x3, @userptr=0x5, 0x52c, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 22:22:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x540d, &(0x7f0000000300)=""/178) 22:22:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0xfffffffffffff000) 22:22:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x809) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x9, 0xb, 0x4, 0x10000, 0x3, {0x0, 0x7530}, {0x1, 0x3, 0x1, 0x9, 0xbb, 0x44, "f25e1b0a"}, 0x7fff, 0x2, @userptr=0xff, 0x5c, 0x0, r0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0x98, 0x98, 0x0, 0x0, 0x150, 0x150, 0x150, 0x150, 0x150, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3b}}}, {{@ip={@remote, @local, 0x80000000, 0xffffffff, 'macvlan0\x00', 'xfrm0\x00', {}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x0) 22:22:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 22:22:53 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x7, 0x15, 0x5}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x540e, &(0x7f0000000300)=""/178) 22:22:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x6330, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:53 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x8}, 0xc) 22:22:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 22:22:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) io_uring_setup(0xa24, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x2, 0x2fb}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) timerfd_create(0x2, 0x80800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x408000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000001c0)) [ 2805.120855][T15100] validate_nla: 10 callbacks suppressed [ 2805.120866][T15100] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:53 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r8, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 22:22:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x540f, &(0x7f0000000300)=""/178) [ 2805.280894][T15184] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:53 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2401, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x404000, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7]}) 22:22:53 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000140)) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2805.543233][T15342] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5410, &(0x7f0000000300)=""/178) 22:22:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000040a01ce0600000008000540ffffffff20000480140003006d6163766c616e3000000000000000000800024038680cfc0b00070066696c74657200001c0008800800024000000000000000010c0002400000000100"/108], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) lookup_dcookie(0x0, 0x0, 0x0) [ 2805.738988][T15503] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x18000, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/147) keyctl$set_reqkey_keyring(0xe, 0x7) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x1, 0x10, 0x8, 0xe7, "929a6998ba10273ecdbd83d2eea62cd897ee54695e5f126cd73c3dcce2f516f938451c140093c9e0b0b3132563ef8e8e888ebad20ae3962bd7d51c433bffa268e7646d2e0b4a5e72d1291ea84c73d2fcb037605d3678429de5879ef453c54967ef2ec9ab2d9047e6cdc8eae6c92b70059eca54297fc6617456be5fcfa8dc911de68c99cc02c1edea08c8f2aecdee1e0e50f8d93dc896ba2793d9c5601d3253a71cc9b02929f55a61ae55e100045ee7410e86cf9e57c6a09dc404df4bf26e41ead3f1a687f16e1735509d477ad7b009fb71225e4a0ef65fad5d92cb9decb54a518d9312eba9bca6"}, 0xf0, 0x1) 22:22:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5412, &(0x7f0000000300)=""/178) 22:22:53 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 22:22:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2806.044355][T15649] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2806.097600][T15649] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5413, &(0x7f0000000300)=""/178) 22:22:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980001]}) 22:22:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108040f80e4000000e8ca6efbb60309000e001b00400000ff054005bf0086b83dc5fec65a834419f5bab93de936cc0d6c19ec3c7f7f49af770f053b0d51c627165aaf2bbcd93c010b33287de866f1fa1f43a1a3f3ee4461e6cf3ab36a", 0x63}], 0x1}, 0x0) [ 2806.406059][T15869] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. 22:22:54 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @remote]}}}], 0x38}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e0000001100c105000080ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f0000000140)="3cb249e473b9bad6c8bfcb6aa4c6d900fdedb75e9955a884b2f8a7154dbff589a5a0c1462bb4da", 0x27}], 0x2}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0xbfa8ee8ecdb6d2e6) bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf2, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x4b) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x20000004) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x8a100, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, 0x4, 0x8, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000003c0)={0x0, r4, 0x9, 0xfff, 0x100, 0x44d}) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="fef4dfbd51a137d9c6ab0113c5b2173e662aa8f15e3b49fa63bf5e35204a5085e83ee3d1b65e2b5efde91cdd8b9d590b81f0daac3a69cc31c69784d6df38c2bf7f71304c96dcf615897f41a29ddb21ff32938cf49678e0ed0e4f61113fb54603be6f12afaad3cd2e6bba14555a5794195bf39a12556c45341e1e9a879a5def72d43c3fd9c96936f513e1ed2e15cc5a6f42504c93009fa30c32af6b6f057aba6622921e3aa286f57573ce39304ef8edc44a704fd96d2c512dc2ce4d55cb8bcb8a0085d311ae105bd2", 0xc8}, {&(0x7f0000000200)="b604b22d2abe13e9305b34c90aee51d0ed54bb3215ea607515eee0df6cc70b9e64afa46c4b742234e618199a6b018620be90033055d9a05ff6b077f3c98ca4de212e0592c60022995541e0a612b518ab6cbb08934f0c1f71b0adc4bfb7d1581ca8acdb2a090fec5f0d8132cc9e2d5064e5295190773d6f52a3c2329bdaf792aae05c458860bc3bbe739b2e931b48ffed2d183e7d48c7d8fe59fca508ada5bc7d3d4a8f4ee79e154ec0d20d6094edff37bb4eb87bf2296a414e9436a449a6095317a22ae70040d1197de28cca7c", 0xcd}], 0x2}, 0x4000010) 22:22:54 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 22:22:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5414, &(0x7f0000000300)=""/178) 22:22:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f900]}) 22:22:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2806.651647][T15981] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:54 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/12) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r5, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:54 executing program 0: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) lookup_dcookie(0x0, 0x0, 0x0) 22:22:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5415, &(0x7f0000000300)=""/178) 22:22:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f901]}) [ 2806.896825][T16194] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:54 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xf800, @none, 0x8}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$int_out(r1, 0xfca2, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x1000006d}, 0x20044000) 22:22:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:54 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000040)=0xc) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x14d001, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) 22:22:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5416, &(0x7f0000000300)=""/178) 22:22:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f902]}) 22:22:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = accept4$ax25(r1, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 22:22:55 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000001c0)={0x5, "9faf17a41d9cfb2ea27c824486246332ea62d93ce80d92660a9f6635cbcc8bb1", 0x3, 0x800, 0x4, 0x10, 0x210, 0x8}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5418, &(0x7f0000000300)=""/178) 22:22:55 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x8000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x1, 0xd, 0x4, 0x4, 0x8, {}, {0x5, 0x0, 0x51, 0x97, 0xfa, 0x1f, "0d14d06a"}, 0x0, 0x3, @planes=&(0x7f0000000180)={0x7fffffff, 0x2, @fd=r0, 0x4}, 0x2, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0x4e61, 0x509, 0x17a7}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 22:22:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f903]}) 22:22:55 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4a043, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x2, 0x2) bind$can_raw(r1, &(0x7f00000003c0), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000001c0)=0xc) r5 = accept4(r3, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80, 0x40000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r6, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x400}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8954}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6deb3b04c823ec57}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541c, &(0x7f0000000300)=""/178) [ 2807.915571][T16746] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2807.963917][T16739] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:56 executing program 0: lookup_dcookie(0xfffffffffffffffe, 0x0, 0x0) 22:22:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541d, &(0x7f0000000300)=""/178) 22:22:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:56 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r5, &(0x7f0000000080)={0x22, 0xff, 0xc0, 0x20, 0x4}, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x21c0, 0x0) write$cgroup_pid(r7, &(0x7f0000000140), 0x12) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x240003, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) 22:22:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x30630000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:56 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x4, 0x3, 0x4, 0x0, 0x8, {0x0, 0x2710}, {0x1, 0x8, 0x80, 0x7, 0x9, 0x0, "2ce55306"}, 0x3, 0x3, @fd, 0x9, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) 22:22:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541e, &(0x7f0000000300)=""/178) 22:22:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f904]}) 22:22:56 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="1100000008001a01000000009eaa73b7ef26af7854b6a33e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee97fe2e29dabc7900000000008ffd0bd04bf60cfa110d5c6ae700"/95], 0x2}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x20800, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x14, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r7, 0x8001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e21, 0x7ff, @empty, 0x2a}}, 0xffffffff, 0x10000, 0x9, 0x2, 0x7}, &(0x7f00000002c0)=0x98) write$P9_RCREATE(r0, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x40, 0x2, 0x2}, 0x9}}, 0x18) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="01b87158", @ANYRES16=r2, @ANYBLOB="000427bd7000fcdbdf25020000000400d10008000c01b406000008000100030000000800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r10, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', r10, &(0x7f0000000480)='./file0\x00', 0x1000) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22:22:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f905]}) 22:22:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541e, &(0x7f0000000300)=""/178) 22:22:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5421, &(0x7f0000000300)=""/178) 22:22:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@flushsa={0x280, 0x1c, 0x4, 0x70bd27, 0x25dfdbfe, {0x721f492fc86f0a34}, [@migrate={0x180, 0x11, [{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@local, @in6=@remote, 0x33, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x27}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast1, 0x6c, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in6=@rand_addr="b128bf1ce35f745aa6bd0d445cab329e", @in=@multicast2, @in=@loopback, @in6=@rand_addr="45a82b9105c06d232eeb07323213061a", 0x2b, 0x6, 0x0, 0x3505, 0xa, 0xa}, {@in6=@empty, @in6=@empty, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1, 0x0, 0x3506, 0xa, 0xa}, {@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr="b863a8da04b495f0b04706b862acb0c1", @in6=@loopback, 0x32, 0x1, 0x0, 0x3500, 0x2, 0xa}]}, @sa={0xe4, 0x6, {{@in=@local, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x45, r6, r7}, {@in6=@rand_addr="0f30d8717221cac29671184b75649d34", 0x4d4, 0x33}, @in6=@loopback, {0x876, 0x8, 0x5, 0x7, 0x85d, 0x7, 0x7, 0xffffffffffffffff}, {0x40, 0xffffffff80000000, 0x1, 0x7}, {0xb5, 0x6}, 0x70bd2d, 0x34ff, 0x2, 0x4, 0x1}}, @proto={0x5, 0x19, 0x6c}]}, 0x280}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) 22:22:57 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:57 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x33, 0x7f, 0xfd, 0x1, 0x3, 0x3, 0xe7, 0x1cc, 0x38, 0x1bd, 0x5, 0x3ff, 0x20, 0x2, 0x81, 0x17f, 0xffff}, [{0x70000000, 0x3938fdc5, 0x5d33, 0x81, 0x6, 0x80000001, 0x7ff, 0x10000}], "1a172ad89aacbd3d6cbe9eaf6184e919af375ddd124d40ee4a8234aee96483fb8146d05a548f0c5923ec94a960cdc3cd5cb458a19ef5998cd6b49a84cb9032a032002f100e728d18698c11e3803e85eb2ca11b6b8f9e82e82dadb1cfbbfdcece9a657b1f4707f5a59d8d6c6546741ba9bf0282b8280dda9b9d58cc48402ff7ce99581fdc2745501805411f2bb8ebdd9c718e82ad67c8f3baded2010cab86bd2f2fce52dfac2e785bbefc942608a98e3ac1f9835ed2c7c01f16eab8fa5d", [[], [], [], [], [], [], [], [], [], []]}, 0xb15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write(r6, &(0x7f00000002c0)="e58b66e199784c24100567070353a1771607d950596beca03184ceeb705133bfb5ec55f9c1e7603c07253a96fb50994467e8828bc1b407b7a7f1eced5c3a1d1422cc4f1b3b69ec444021aed98d49b1f80cf338bc186a83801ae8351c769b17fd493d17918cbfe727a5cbc92c0f35d84e7815f44daa7930ae51f20208969c8b3372a69387877fedf06238fe84e30c", 0x8e) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x20}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x4040) lookup_dcookie(0x0, 0x0, 0x0) 22:22:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5422, &(0x7f0000000300)=""/178) 22:22:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f906]}) 22:22:57 executing program 5: socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00', 0x9}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008108030f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x8010) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f00000001c0)="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", &(0x7f00000002c0)=""/236}, 0x20) 22:22:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:57 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200080, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x3, 0x10000}}) lookup_dcookie(0x7, 0x0, 0x0) 22:22:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5423, &(0x7f0000000300)=""/178) [ 2809.523369][T17517] QAT: Invalid ioctl 22:22:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xf5ffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5424, &(0x7f0000000300)=""/178) 22:22:57 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x224000, 0x0) lookup_dcookie(0x0, 0x0, 0x0) 22:22:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xfcffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2ac400, 0x120) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1081}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x28008885}, 0x20004000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x20004000) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000004c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) 22:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f907]}) 22:22:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5425, &(0x7f0000000300)=""/178) 22:22:58 executing program 0: lookup_dcookie(0x6, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/207) 22:22:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5427, &(0x7f0000000300)=""/178) [ 2810.403822][T18059] validate_nla: 5 callbacks suppressed [ 2810.403833][T18059] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:58 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x40, &(0x7f0000000380)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000080000000000000000f10000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x14, r10, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x80) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c844}, 0x480c4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:22:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:58 executing program 0: lookup_dcookie(0x0, 0x0, 0xfffffffffffffde7) [ 2810.549799][T18196] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5428, &(0x7f0000000300)=""/178) [ 2810.634760][T18196] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x0) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r4, r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0xb8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x34}}]}, 0x64}}, 0x0) 22:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f908]}) 22:22:58 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) set_thread_area(&(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x8000, {r0}, {0xee01}, 0x10000, 0x4}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e20, @rand_addr=0x489f164}, @in6={0xa, 0x4e23, 0x8003, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}], 0x3c) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x200, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000001c0)) setfsuid(r1) 22:22:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5429, &(0x7f0000000300)=""/178) [ 2810.865993][T18283] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f909]}) 22:22:59 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sync_file_range(r1, 0xffffffffffffff1d, 0x5, 0x1) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="b394e075fb52834f31948cce3be4d4c2fc91acd9d8d973e0f75315dd39", 0x1d}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x14, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0xffffffc0, 0x7}, &(0x7f0000000040)=0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x990000, 0xed, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x400ba, 0x3, [], @ptr=0x1}}) 22:22:59 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x3) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1a}) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) 22:22:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5437, &(0x7f0000000300)=""/178) 22:22:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f00000000c0)="8b8e00865681327e24af20a7fa939d2699fb39bfe622db3cad02add553b006b8e635e01ea91dcc0ee1adcfe7421379", 0x2f}], 0x2}, 0x0) 22:22:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90a]}) 22:22:59 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000180)=0x101, &(0x7f00000001c0)=0x2) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, r3, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) [ 2811.505052][T18612] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:22:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98f90b]}) 22:22:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5441, &(0x7f0000000300)=""/178) [ 2811.687461][T18688] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:22:59 executing program 5: r0 = socket$kcm(0x10, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x442802) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) r5 = syz_open_procfs(r4, &(0x7f0000000380)='net/ip6_tables_matches\x00') ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000003c0)={'xfrm0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x840, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r9, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000540)=@in6={0xa, 0x4e22, 0x81, @remote, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f00000006c0)="2f7c1c966438a3b1ba47d5709e23cbfb7ce30e6377493b2afa76c6fd4cf30c921ee12e5bb4b16d1e51c6a018fde6b2b7b7231e1e91d980ffae949d58ecdd01054808e5cdfe610ddfd9afccb2468c37316cc6529a92587ce6d4fe90f8618be4e05320bdd3e0715112eebe3f7639c7da5672370745d6ba3b414874a19fbd24269a706e9c87ff74d1d99602273bb6c0347e79bae2aa75ade469e76bc37b1af487abd8a6cc105fea1cc8dc2a450a0fff8d56b5559f74a6882ef8db4fa9af289f8ba709e4a8b867fe0981010a7943527e7954db4640a03001297882e96d54819336c6024d985a75e38f", 0xe7}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r13 = openat(r3, &(0x7f0000000640)='./file0\x00', 0x1, 0x48) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x14, &(0x7f0000000080)={r16}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x14, &(0x7f0000000080)={r16, 0xffff, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0xfffffec2) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000280)={r12, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000300)={r17, 0x800}, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r7, 0x805, 0x0, 0x0, {{}, {0x0, 0x2}, {0x14, 0x19, {0x4, 0x10009, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40400c0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000600)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x228, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8090) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:22:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xfffffffc, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:22:59 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x81, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a2d, 0x5}}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x9, {0x34f93760, 0xfffffff8, 0x10001, 0xfff, 0x0, 0x7}}) 22:22:59 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x15}, 0x4000804) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x2}, &(0x7f0000000200)=0x28) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x100) 22:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00001]}) 22:23:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5450, &(0x7f0000000300)=""/178) 22:23:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) [ 2812.112302][T18875] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f026]}) 22:23:00 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x230000, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x69}, 0x2) lookup_dcookie(0x2, 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/213, 0xd5) [ 2812.259870][T19020] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5451, &(0x7f0000000300)=""/178) 22:23:00 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x800) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xf, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:00 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f027]}) 22:23:00 executing program 0: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x4, 0x7, 0x4, 0x2000000, 0x4, {r0, r1/1000+30000}, {0x4, 0xc, 0x4, 0x81, 0x1c, 0x1, 'dB9>'}, 0xff, 0x3, @userptr=0x7f, 0x2, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240), 0x0) lookup_dcookie(0x0, 0x0, 0x0) 22:23:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5452, &(0x7f0000000300)=""/178) 22:23:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xc0, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f040]}) 22:23:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xec0, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x545d, &(0x7f0000000300)=""/178) 22:23:00 executing program 5: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) creat(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getegid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000001000100000000000200", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="0200", @ANYRES32, @ANYBLOB="02000100", @ANYBLOB, @ANYRES32, @ANYBLOB="0d5895", @ANYRES32, @ANYRES32, @ANYBLOB="02000700", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="a0878dc5944b9a149e6c279c4d0500a19eb56f5e21e9b8176cd60ce12348ac292057039cc3bdee65840e4466b0217efe378e06edc7c12ac6093281cdaa90e6b11bbc481bb88be63f45c994927524be7b67876fe64ff288d667fd54891a8e1bd2e4d79c0dbf1e881479498f01522e0c4510563a670403e02d525f1731de6c7fe254ea07db450d8d87", @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32, @ANYBLOB, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000"], 0x19, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000280)="87e0958cba8b8af1d918ad502241623db4a331c503413de175c1915a9eb76ff059df8e6d90ea5960485c77ce390095828dd5416041ae3fe5b91a26ae6e32eadfd1fc443ff3dca356124fb925b99c237127a2647132a8b445c87f16022c23d8351975347fd44c1d86c78b3b2e986cbdeca3ca7ab1df7db6b19e102c193319d082a005879414f3f0343265bf9e", 0x8c, r1) r4 = add_key$user(0xffffffffffffffff, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="318cc2fbd3d2de4acea1373440c04803a38b327117314eff9300fa12624659d9f8c3429954775a377bbf16225efce077147553d13e3098d03c8fb1e314d0ab83b39e93287269f90338679d6c702e77a23c92e45fcd8f2db2506db11137186de72a30a5591a419c220ca1e4e7c058781ab5d94bd548f8a3b0bed2004068951aea169d1aafb39c3100237e77", 0x8b, r1) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x0) r6 = add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="c8767e832068b8c0424205f746c6cbb506a0fd662e98047c77dd423885b018078bf673de1a88dd6621b24aa398ca69bc0c43ed69b41eafd432dc27533932495291232bca7a14d7f67f17fda847fb7174c8bc96801160794c14fb7ea4f8ff9d42585e4a8a9d0beae090", 0x69, r5) keyctl$dh_compute(0x17, &(0x7f0000000540)={r3, r4, r6}, &(0x7f0000000680)=""/95, 0x5f, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:00 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x490000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x9}}, 0x20) lookup_dcookie(0x0, 0x0, 0x0) 22:23:01 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @rand_addr=0xb5c0}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ae, 0x4, 0x3ff}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f041]}) 22:23:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x33fe0, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5460, &(0x7f0000000300)=""/178) 22:23:01 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8001) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0xe100) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x9, 0x6, 0x2, {0x1, @pix={0xb2e4, 0xffffff4e, 0x42474752, 0x9, 0xee, 0x5, 0x4, 0x80, 0x0, 0x1, 0x0, 0x4}}, 0x800}) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3f, 0x1, 0x7ebb, 0x7, 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r3}) [ 2813.414699][T19509] overlayfs: conflicting lowerdir path 22:23:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2000010c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5600, &(0x7f0000000300)=""/178) 22:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f042]}) [ 2813.523459][T19838] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:01 executing program 0: lookup_dcookie(0x8, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x412002) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7, 0x15, 0x5}, 0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f00000000c0)) 22:23:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5601, &(0x7f0000000300)=""/178) 22:23:01 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x0, 0x4}, 0x6) setsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f00000013c0)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2c, 0x8, r1, 0x28}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000080)="cc1ee1a8f493b925aee32991aeb2dbf4364b62a2dbb534d74303b1f7cd1c1602de2c1000e384a88ae99fc910fd4b272f02682dc05f57387947130faededb1b", 0x3f}, {&(0x7f00000000c0)="1a59d375a4266c87657c378ac8ca3b583bb4af195969876e8e73a76dacb93d9a5f7bb06cea0813b0d3389bfd99015b29466e015d0175fa889b4078226be3bd21e1e64786008dbf664214169176695fd61c8edb39d27afbd826a2f2b1971ded2ff78f07feeda5e1df669e0ad82159c6ee1be6dc2fedb1503549eb8580c5fb8459e7a18099198a0ff63163337b77164b614224fa7c5950a3700fc27d6903d64a7578e4acfdc74798866b29b3746fb1fc0479107255bd0cebbfe549b3222b68b07cac03745c1e4ecbe637e5d531c86882cb13", 0xd1}, {&(0x7f00000001c0)="9f33560cea6cc7131959004d6e09e0f6bfc3c31a8ca09743fedfbda12a2d6192fa6dcb26d91c937f7190d1dad7c6f00e60d5965bb1ed728c868102a20847192c294c593ed5a31635419d71d4be9010", 0x4f}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="031d0ea08acd51c96cc6fb7ef12884a1bb641066e59b0581dac6dbd700e587735cc67471bbaa3aec5f2c3b8a5e6e5a778a1ff0376b63ed163283b8edb1501deb3e575e12ce7d692e042f91169e9ef115", 0x50}, {&(0x7f00000012c0)="3022363876a66aa840eeb2520311815cb001e3b8dfecb91991c15b38042430", 0x1f}], 0x6, 0x0, 0x0, 0x4008850}, 0x40) waitid$P_PIDFD(0x3, r0, &(0x7f0000001400), 0x40000000, &(0x7f0000001480)) socket$kcm(0x10, 0x2, 0x0) 22:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f043]}) 22:23:02 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000a80)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00\x9d|\x7f\x95\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xff\xadY\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf%\x9bK\xc6\t\x01\xe1\x86\x04\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\xb7=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00Hy\x86\xe7B\xb9*\x16\xe5\xa0,\xaf$;nbf\xaeL\x8c\xe3\xb1\xa4]\x8ei\x16w{\xab\xe1FI\xcfC.\x17\x17p\xabgo^+z\x01\x17\xae\xee\xd7g\x16YI#zf\xc7)\xf5i\a\xe9\xed\xcc`\x90\xf4Ns;\x94\x8b\xe6\xa8\x8f\xfeH\v}:\xf6_\n\x1aW\xe7\xdeUV\xfd\xf5\x9e\x1a)\xee&b9\xa3\xf2\x1df\x9e\xeb8(\x03(\x83+\x99\xb9\xed\xed\n\xcb\xc3\x91\xe8%c\x0e/\x7fw\xe3\xd2\xd3\x8d\x0eB\x98(d\xa9i\xe1H\xde\xd3\f\xaa\xb4\x92\t\x18k\xc0H\x11\xec\x10\x04\xd0\x8c\xc4\xff\x99\x99\'\xdc\x85E~\x90\xe7\xb7\"*\nM:;/)!\xa4\xf2w\xc7)2\xce\x8e\xbaXY', 0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0x800) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x7ffff000, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5602, &(0x7f0000000300)=""/178) 22:23:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f044]}) 22:23:02 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x100, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setattr(r3, &(0x7f0000000140)={0x38, 0x1, 0x10000022, 0x7ff, 0x6, 0x0, 0x4, 0x4, 0x7}, 0x0) lookup_dcookie(0x7ffffffc, 0x0, 0xfffffffffffffe38) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e23, 0x26c0, @dev={0xfe, 0x80, [], 0x1e}, 0x80000001}}, 0x1, 0x6, 0x3, 0x40, 0xfffff5da}, &(0x7f00000002c0)=0x98) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fsync(r4) 22:23:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e000000113e8108040f090000000309000e001b00260000ff050005bf000a5a8fb44b238ba70000000000effffff10e48a26e58b94ec5283a7460295fbda734db395aa6a2b304c4caa029aca264c65463191e5c2bbc04c0eabe54f29868585b9fea8da732dee21e6e15a794eefa77bee78e605b2bdf0eaaf743f14c8806e6ca0c6e149676b3e2a773e7eb91dc3c27c84dd3a15e3dadae60f063b16d1ceb7772c6c03b526d9312825b22eabe24de1f44eb2195cd3854df2326d4677ecfce1dc3d746db00"/221, 0xdd}], 0x114c}, 0x40000d4) 22:23:02 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x2782, 0x0) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)}, 0x44050) 22:23:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xfffffdef, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5603, &(0x7f0000000300)=""/178) [ 2814.529268][T20323] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:02 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x9, 0x0, 'client1\x00', 0x2, "5ac3ef356263b336", "35c87b579f10ee90664026adb93e9e18210e960608d1d689017750f5e77c5a25", 0xf55, 0x200000}) lookup_dcookie(0x4, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x1}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="010005000600d5d203190d003f20"], 0x12) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0xfffffffffffffff7, 0x0, 0x7, 0xffffffff80000001]}) 22:23:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5605, &(0x7f0000000300)=""/178) 22:23:02 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @stop_pts=0x7}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f045]}) 22:23:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000554e9712d80c040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff0500020000861e94b444c886195c41c62d54c3b06f0a9b60bd2d2b63ca84a4dd7ffbf3dd3fe654b2372288df5b1020eef3e15072e9529b4d927405ba09feb048732f7670304b0917857ba6d8ac7aedf52f6bd082d7a79b90787420dcb6be60a2f68db0493ddad4bc37380de41758339e705e9d9212b8330785202d59dffbbdd5fe972ab1f46affd5149a3b9eb572e39976bb1d85c3066e17a1c9d4c3fd0e31a58d26216e1bae8e6ebb8c0859e977c2aa401d1d993d27537ecedf42ba605a091262f82811d5e5ffddd86443", 0xf4}], 0x1}, 0x0) 22:23:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5606, &(0x7f0000000300)=""/178) 22:23:03 executing program 0: lookup_dcookie(0xffffffffffffff00, 0x0, 0x0) [ 2815.087219][T20866] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f00000000c0)=""/83, &(0x7f0000000040)=0x53) 22:23:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f046]}) 22:23:03 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x100, 0x0) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x2, 0x0, 0x6}, 0x4}}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5607, &(0x7f0000000300)=""/178) 22:23:03 executing program 0: lookup_dcookie(0x3ff, 0x0, 0x23) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x2c0000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='numa_maps\x00') sendto$isdn(r2, &(0x7f0000000640)={0x6, 0x1, "8f6075d297e4e97f7dc565f53f774d4b35f7013d0111bbc509af26980a4091ec7fabcbb245de3fc3fe0efee05cb8483b881dbec294d655f8c01785f68391885229d65933758f28455c269c"}, 0x53, 0x60049c0, &(0x7f00000006c0)={0x22, 0x8, 0x20, 0x8, 0xb8}, 0x6) getpeername$llc(r1, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000004c0)=0x10) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x19, 0x19, 0x29}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000540)={0x9a0000, 0x81, 0x9e6b, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0xa20934, 0x1ff, [], @ptr=0x9}}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0], 0x1, 0x7f2991bf}) 22:23:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2815.512396][T21190] validate_nla: 2 callbacks suppressed [ 2815.512407][T21190] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'wireguard1\x00', {0x800}, 0x80}) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x10, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5608, &(0x7f0000000300)=""/178) 22:23:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f048]}) 22:23:03 executing program 1: rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpid() r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) gettid() getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f00000001c0)="f227f924592123af6e08ba18dd71116ac8980700f42c579bc0b8fbb70df94e9308400fd482222f86369f4127bc0566c6d0cc4274e068fd269d7469739cb3c28a69e20baa8c835cd1b13c03834618afa6a9ad025c5b0af5192a0c4dbfbb6b14aa80936537c23c4add79116f8152eda77f7b1cf7debdb942c23039de4f93f6cfdbe38fa1acd1808950e4a04d2881a4cdc4565f6062ae314e0ab359fecebb20649ac9fcad90344c", 0xa6) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r6, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f0000000280)={0xf5, 0x7fff}) [ 2815.728013][T21335] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x14, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5609, &(0x7f0000000300)=""/178) 22:23:03 executing program 0: r0 = semget$private(0x0, 0x1, 0x4) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/114) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) lookup_dcookie(0x0, 0x0, 0x4f) 22:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x84000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xf, 0x1, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) [ 2815.979081][T21547] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x8, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560a, &(0x7f0000000300)=""/178) [ 2816.175941][T21681] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:04 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$setstatus(r5, 0x4, 0x42400) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) [ 2816.296784][T21850] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2816.331112][T21850] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:23:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560b, &(0x7f0000000300)=""/178) 22:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x5, 0xc0, 0x8, 0x4}, 0x6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x0, 0x3ff, 0x101}, 'syz1\x00', 0x2e}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x40001) 22:23:04 executing program 0: getrandom(&(0x7f0000000000)=""/213, 0xd5, 0x1) lookup_dcookie(0x0, 0x0, 0x0) [ 2816.382764][T21951] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f06f]}) 22:23:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0xb, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560c, &(0x7f0000000300)=""/178) 22:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x900000000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x7ff, 0x1, 0x4, 0x400000, 0x3c1, {0x0, 0x2710}, {0x4, 0x0, 0x6, 0x1, 0x0, 0x3f, "71da5321"}, 0xffffffff, 0x3, @planes=&(0x7f0000000040)={0x7, 0x3, @fd, 0x20}, 0x3, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000002d0001a886a25a000180000000000000", @ANYRES32, @ANYBLOB="00000002000000000300c4c1080001006270660050000200080006000000000004000500400002003c0001000000000002000020000000000b75daf6a86081eca802891600000011000000000000000010000000000000000000000000000000000000000000ddffffffd66cc89413b0611aed00"/125], 0x7c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r5 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x42, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x6050) 22:23:04 executing program 0: lookup_dcookie(0xfffffffffffffffc, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'lo\x00', {}, 0x9}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video37\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x80000001, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9e0905, 0x7ff, [], @ptr=0x4}}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x8, "897cd560f769e200000000000000009d2d1ce7ec3bfdd70ca9255b1f1037b6e6", 0x1, 0x800, 0x9, 0x1, 0x4, 0x3, 0x1, 0x8000000}) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xf8, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xf8}}, 0x20000080) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="340100a1", @ANYRES16=r5, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x8011}, 0x40004c0) [ 2816.895741][T22099] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x10, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560d, &(0x7f0000000300)=""/178) [ 2816.968691][T22099] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:05 executing program 0: lookup_dcookie(0x8000000000, 0x0, 0x0) 22:23:05 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x181200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x6761393fcea4c555) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000140)=""/58) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "6c28a0b2c5e344be96a865fcc1aa6953"}, 0x11, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f00000004c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0xce79f7ad1ea3264b) 22:23:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x14, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560e, &(0x7f0000000300)=""/178) 22:23:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f070]}) 22:23:05 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x7d, "e12fa7f89fc06e35759e42b1df8aeb2251a3fa2cb3d0b39c3fb4a3ef9179600358b6e7df7828c222eafe50b3b0990a394ee13551094d0add318bbf0c08a2ec2ce32abe3794289313995f0ea5d54dfc6f010f1948d5afc92631d0147b6f225366b883308873d61806f456596c2f3d1c9011258979944a27ec294d6fe81dd8a65d"}) r1 = socket$isdn(0x22, 0x3, 0x24) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0x7ff}, 0x91d}) 22:23:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:05 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x8004) [ 2817.534422][T22464] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf99800]}) 22:23:05 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x280000, 0x0) 22:23:05 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x3b) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x8, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:05 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:05 executing program 0: lookup_dcookie(0x4, 0x0, 0xfffffffffffffc5d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) recvmmsg(r0, &(0x7f0000008ec0)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000340)=""/168, 0xa8}], 0x6, &(0x7f0000000480)=""/4096, 0x1000}}, {{&(0x7f0000001480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001500)=""/44, 0x2c}, {&(0x7f0000001540)=""/207, 0xcf}, {&(0x7f0000001640)=""/13, 0xd}, {&(0x7f0000001680)=""/221, 0xdd}, {&(0x7f0000001780)=""/221, 0xdd}, {&(0x7f0000001880)=""/57, 0x39}], 0x6, &(0x7f0000001940)=""/19, 0x13}, 0x80000001}, {{&(0x7f0000001980)=@l2, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)=""/127, 0x7f}], 0x3, &(0x7f0000002b00)=""/121, 0x79}, 0x1e4f3b7b}, {{&(0x7f0000002b80)=@tipc, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)=""/88, 0x58}, {&(0x7f0000002c80)=""/179, 0xb3}, {&(0x7f0000002d40)=""/142, 0x8e}], 0x3, &(0x7f0000002e40)=""/175, 0xaf}, 0x401}, {{&(0x7f0000002f00)=@generic, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002f80)=""/61, 0x3d}, {&(0x7f0000002fc0)=""/139, 0x8b}, {&(0x7f0000003080)=""/113, 0x71}, {&(0x7f0000003100)=""/204, 0xcc}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/248, 0xf8}, {&(0x7f0000004300)=""/151, 0x97}], 0x7, &(0x7f0000004440)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000005440)=@pppol2tp, 0x80, &(0x7f0000006940)=[{&(0x7f00000054c0)=""/28, 0x1c}, {&(0x7f0000005500)=""/79, 0x4f}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/223, 0xdf}, {&(0x7f0000006680)=""/110, 0x6e}, {&(0x7f0000006700)=""/173, 0xad}, {&(0x7f00000067c0)=""/144, 0x90}, {&(0x7f0000006880)=""/174, 0xae}], 0x8, &(0x7f00000069c0)=""/99, 0x63}, 0x7}, {{&(0x7f0000006a40)=@alg, 0x80, &(0x7f0000008d80)=[{&(0x7f0000006ac0)=""/226, 0xe2}, {&(0x7f0000006bc0)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/86, 0x56}, {&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/184, 0xb8}, {&(0x7f0000008d00)=""/109, 0x6d}], 0x6, &(0x7f0000008e00)=""/138, 0x8a}, 0x8000}], 0x7, 0x40002000, &(0x7f0000009080)) 22:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 22:23:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560f, &(0x7f0000000300)=""/178) 22:23:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0xb, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 22:23:06 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 22:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009800]}) 22:23:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x10, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:06 executing program 0: lookup_dcookie(0x2000000, 0x0, 0xfffffffffffffec4) 22:23:06 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/119, 0xd1}, {&(0x7f0000000700)=""/82, 0x57}], 0x100000af}, 0x40000022) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000400)=0x6c6, 0x4) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) dup2(r4, r5) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000000c0)=0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x6364, &(0x7f0000000300)=""/178) 22:23:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pread64(r0, &(0x7f00000000c0)=""/204, 0xcc, 0xa00000000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x18, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:06 executing program 0: lookup_dcookie(0xb5a, 0x0, 0x18) 22:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f000]}) 22:23:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x8912, &(0x7f0000000300)=""/178) 22:23:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:07 executing program 0: lookup_dcookie(0xffffffffffffffff, 0x0, 0xffffffffffffffec) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1b) 22:23:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x5, 0xffff8001, r0, 0x0, &(0x7f00000000c0)={0x9909cc, 0x433, [], @ptr=0x7fff8000}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000940)={0x6, 0x9, 0x4, 0x2071908, 0x0, {0x0, 0x7530}, {0x3, 0x2, 0x5, 0x3, 0xfa, 0x6e, "ddc85787"}, 0x4bf, 0x2, @fd, 0x4, 0x0, r2}) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x2, 0x9, 0x1, 0x3260e0541d794fa2, 0x205, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x1028}}, 0x4000000) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140)) 22:23:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f99800]}) 22:23:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x8933, &(0x7f0000000300)=""/178) 22:23:07 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5edd8c76}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x516}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r8, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) accept4$tipc(r8, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x100000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000480)=0x37) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) signalfd(r1, &(0x7f0000000140)={[0x5]}, 0x8) 22:23:07 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa20, 0x20100) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28010400e8636e4c000000070008165ea4e35f02797ae30073797a320000efff04000100070000e924f69079ce9efd0e8f3455975c9a3d371a13e961e40d36bc2d2a6d272611eda595ca4a893614060000000000000087434e6ae5e628d4fb286115f6f3e3079c4dc064fe6181c0c92c58042199b2d8d31dc9318e35a2528ddc1e58c11793d18a349a909f0b7d1d5d2b8b02b4e7b9a2219b1d42be632fb8fa80516f5c195c3e3669f04a69e70612d0c5fc5d4cf030fe04acc472acc6e351032346c9f18623a38063fa90be90cb6425f7f9a71166b33a29815a5f321c822cf708"], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) 22:23:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x2, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:07 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = geteuid() syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x6b, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000380)="fe105dc4be2549e36b882f5da6d8f44e01ce211317f2ec22383984002ecd1dadefac564434d304c5e78e795ada8ffeff7a1b5c3eecf061027d1d96a396edf8685603a2423b77431a24ff2e2d4d73805eaa934982f700a848e443314f50409eb48884fd203dbfd1ae855b36d47254c3d2caba14444f99c8ee5c6126cbe56ca8fbf1c3f609fe96d426c9d425387548abb724a1c880eb85fda25efb1310c3f8b70a8f447eefcbf516d2fd2dcb7c87d9a0613225aa5cfb78930056b306a0e40ee6301c12f24fe8aef152f99ca10cf72d20aefd7ab56e4ecbf560979a5982c2ed1e5ec61c2430c4d47f683ed1ba945faa70c18d20a034c36d9a7c23a97fec98c97e98919cf1e72f8d9bd2c7bd93237421ed2a8bc66f6e9e0a5f6e3a976899236f5051505d0584735e0d9fd6ddaca2aaf32d25436679c3bbb0ccc390c2ecd2e099884e829fc335b9c89f382e65463efab4454b2052066c0fe2c9a3c45c92fb375f1b6037102980d3c3510f9f1da69a5c459d6d6d032b62c19662124d9a58d638d76b1f1b5567d0124ba77aa122da435436f42ab761372f85aa4981283d6dc2fb7df4fb97994580bb7304ea082c746440c737a1df6ce493b34f6a890623841de48519464040f70c54fd4c0e99a32f2f2b0713d7e278d27e8110bbf559bf63be7d96fb3e0d4e656aeb06edb971c4e0a41fe5e38b96aa58d4c9c1eb0fda671c7c8dc21e0b7c8bb999f705f4e1398144a90b05838cf43ff1214c9d61e0e4af1a93e1174c30871fb599bd2bbaffdbbbc39b5bd8adebeef99807fa18866311f2722c6d7ed9ac97641c62afe6ac5bef4a13b9a449e64400aad88da9019c69f94f894cff2ee9435b7e16c59158c5352bf4ba38d32cad1d2f59234173c0e58a49231dd5677af38c1ac4486035c65c4aa0c7f4336537d6e53b789353c1744d259838c670314d9e4b2d5aa372a7c9c46e80566abb357cdb9e8ee11c3c8063bbe92d3a7bc4a4df7bc026dc8d225284fef0e43cf8f672a858e301548447a61ceba870bf6f159bd402049bd882d014553784c97ef8d906284e20dfd5ce50efe9a84cb585d5a49dd7f073d0159a23c9df94e93da5e4a3562d23503026e7b5118b064b94402128b8f1359f9ee78edacf3eef5a7d86bc12c001c54aab3d8e0365b38b5299353e86887a37740812295cdc7980c535cc86d1d7dd4067cd3898e0d04a63cf056f37ac8223e178e1f292081a44d464268c72fe6dec59740acbecb4cff1c700cc938edda8247dfe7b34dd97a0805fbc67f5c6c8c9959f36f3938804100189ec0c8d99d4ccee865885fead4d1c60ac7c8adf76c1257699bf9d33c6b254706d89ca1352a21a51dc12aeb861ef00d1735a06d4d4d80a424ce9c3513e4fb8b5974b8a3d1231cddec77339682597934e978ccb4b02c44b8ffeba66d208087a5dd65fc13740f456fb24e5ba255689c4f4d3b17929e9166bd578cfdfb5a94d7334689a0dc1c3c9286f74649128333bb25e9a9feec4704c30cbc9181870650feb8a33481ae0443aa9bc3fd29811a77909536dfd177ada5d6b6c05cd1f60e6f21ec8895a2d51491394f5e8bcf286d190e6c42b9c50491942b106afd6b7d213dfa57c25b813411f5416ba1de194bf64aae08af1a3bb902eeab5550f6bf7133bd7af26e470aeda213347a342369a0ff637eabc5d793720473e1eb33387035e8b564eb8caa6cb142b75f00ebaf53db4f8570b1aa6987e854b26cec86e0b6bd2f9d4afe55cbc7e24aa3c52fdcf67ae0bb1741514ff38127f707869a3c403ebcdbce70be1732fc592bc3412eadb2b140945afd23fcb57b62cf27570319ab3c6d661d6ed7fde01ebf5ee8ef5e7959fac6cd7fbd271244dd705b73571805375b9156fd9589d060a5e5ed90b2033d065f19b417a65220ffdc612ba4a62f7dc1fa867629762b29f2282ec1e77345bdfd6e3b984b0d2b2b1c60011f49f40b84619e2da3be31bec10c0dd7272d134e7a64dbd45ade21d94d6a23ecf54e055db04c91e22c3ca5e6cdc8bd9f916b764edca177e206f185130ec193d35acf910870a0f6e33f0c6814d8c63e86ecdc962ff2b14799666a69b221cf1333e1299624983c4c02a68c849d31a732c0c63f34a4cc7e940496a9a550fa2c3b144ed74d1f134c2fa3710c2759f010cc6ac533d67f0fc4901991ad948b85dfe0f3b53e1ababa9785fdabc99203fc9966a09ce0dc64d44496b28c661a860dae5d6bfcdf9d042d159f0ebbc8fb169bdaf8aea37851439f48cdedead0227ef2ad2566122259b1fed3637f9a3bcd83c81d0340707104687dd9745fef1268b3663184c6c02894cad2bbe8b8c06f7e53a4dbe88c3da1c0eb51cd7411616ed41b58cfe854dbea29dfdffbfbe2355986d51ddf1838209fd9d95ae9ddbc59ccd1dcb69f405b35782236abbe97865138de0db8a196b864840eff844fd9640c3d68badeadcad01b17ed011d6e2e78d750c22c0da303253922953802a178425d449523b76d6045bf618495ab7befc7b201ac03a7f519ed37735181428ced2f16efa7fd318382c0deb72f09a7800a88df06991125f29133ab143ef65a0e72c5732c7b4c7d8471cb62f9dd63559b01c65fd7547041c580981fc20f79fa98064a25fd1a4b1a2cf2efb63a029d83ce05a9bc6b9e39b1fef641296340f764a013f7da975fca49338fd277c7742e03aa46da6d5dea569384e0d3afaf871e24cd82b6288d969098824c43ff94b9d622ad5edb0ef6e8b48c0ea5d5f59dfd66d62f05a009dbbba7c4fa4043dcd6cf57ab557043d5dff7fbcedece0242a8cde03409ea3fc16e53f91a28a2a5f2689f9351226d7d124dfc29b6ec84e1fd3e566765f9428946f93a1f96319ff8733e804584a493a48ef32b52fc650d01a135a05137236df6c93724aac54bd864acc88bd23239701c2b7f0480b3600a6f9d74d721caff1970e348b8cae04926726d4138d722a6011951f7b9ace3b04537fa97ae99d1e99f986ff5384eac8ce9cf7f5ce122b62a4b77564d571a5bd697c8239ca9126223e7975740e72409a2e2bb8f341dfb9efa9dbfc17c9b5c53afe41cc3443c5862aa6cd33087d3f7f4e0f0edb33cb3b423b3dc3e7f23a4326b8120ffcc50d8591ef09b49bb3175eb51a174c7f84f4fec3a49aeafebc75f73c4c84ab0b4d14f4d311fa55f564e835e3d53958e3ae77390ac1cc2aaaf4fb208d502a4e057c343f150d533dedbf65944e9af3150dc270e266351eb77e2cdce57eebe69c0985d17db3f5250fd6160cfe1f23cc03279d37c4c0fdea9bf3f9744dd5c6bf44cf8bbb800120b9d7c599439d33e8e3025778a75f48fe967e0c1b564c67de36e5fa4f2894b88aaf85e6df72b611a43f604a98f3d4a15b1b151aa1c08d043b66a1142c0ee23af93596256fe4a989ddea7667f42a650926cacb6ade0521d169ad69dcfbe3a680a01c010ec3cb918d0d57b471690a781f37460bcaa950825cd858900afb2b6be5c2a0e023b996ebe5f6e70e729deee6c17249a47a5496b27da57f29e2b4936b49c4e3179373b9198b7449ab288390f42e787fa12ad409526e32e37453dc1f5a86e2ed2fb3835d04a8b1156a47501a9769eafb042d5c4bae5539f7526eed98dd4556901e5439e7583422ef2369767b4b320afa626cd596c9eb0c03f02eb47b3a055fa0e7b1d83905f060f01f6a5984f19328f88bfca45cde0bfb3703d53cdf1dbedc272aeea0bc50af80debe19e25480de01c4f7751894a17d61755a73a49e0646d73b87a98dec6de1c2c2b16e9ce93106d1fbf74d16b8efdf8a83e44eb4664614fabdd9fff66ab42563d1d33ef08955d1e0b1b1218a5e99cd9261d65eeb53a797b830cd0b1d2e3b4a2a754f86d90d56ce8a7a1544f92a3ba84f7269473d2e1409ffecbe1888c6d74cacd0371d24944d5af2a0e02e5d297e548ab615df6b48171fd445b3a9a81489a17d40bea81f176295c4a6d521edc684bdbbc0112f55d6ac86729f97b744ba01c86c8677d663eb5c82df418edbca3123a5b9cefa717e6b4e5d2c60f0c7540b799f2565e79ea5ed85fcd18a4adcacf9c6561aaef59c9f989affe665e64b6139aa79ff1144c6451f4553dc94a557cb863b3b951ce843ea60077603109a0e8116b4c449659cf7ab695f0431732e811ddac133a106913d2a1dea51c0a9c19191b3ecd7c38ddb5df514af45aa79caf55642d2925c48cc22668441df806697919341703e0cf2ab6e51c0f403b3ce4b6eccab3376b1cc897c94bb48500320a08529a2b41993c5da5d72a2373bd4cb569d1eaa9841fa16ad3300cb14ed76f4afa3f9efb68cab3f287fe9e4684e65e0105cfa2b7061fa0e4bbad38afc2535a4c98eb8d8ac7aa4c933ae1d3b981ecf1719eb4ef738a64896682c6ace352165f7d50294e3bc98ef64f67d017299c6dccd8bc4d0a779ab8299b9c3beff7467e9003dcd3ab1a1786b84f646b6360285fbeb9242960f8fe4705180315f23659ce3fbe9de3e23bb5e2ab9865fbe36931170667c70a44b02c1c83a935073e56ebea4192407bb23cb2124c070ebc21bb0124a4ca566ed70bfe70ec762183c13d28b6cd5686bb1a6f152711a62af76e66343a478dbb02634bed2b36766500c5807cb3e3b78d85b398cf539633b2665c5c21a4bfb6eb63e18823e9d77148fc4b8b632f8aecb4c08d2cffb12cd549dbc569cf59f2815390292bc48ed819d14d2917c217f33eb2d8a35769bd74a9424c72958869f4be9c3b9f481fbec0e1170dc3244980a8e2fa2b22644e4777fb38cc0b72928c14625332b1338474e054461c618926d0c8f7733d95a49f6eb4042d8da2195380ebe222b94be6f5c397db34b1d62bc752492a2d7fc97d8fb6ae828e31dbba544dd72d6b30f62c9742c252a04ca0d93c072602dd17b1dea2726afd9393ef8e13f48eef6d1008279e5d01a5d0f845c1b97783097079f98e9bef9538ea8388267af20112d33f1ece2876f595d4d0f7e5d67543e865dc7daf908374f5f11b96c5c393e6dbc95b31c6c2efbcba06543501782c40d8cff6a2af046cc78d509a373fd61acc3a3218eda652b44dfefba22fe351d5c37b9a97a73d1c93b99f0eed4c6942fefcaa2b7d8bdac286860c629df10795ca73fd012656d0d15c1c66b8313146d1963602b4d4c4a673efb24b3b357d5a59f1c71e91f22e19fe38677842d462e67f74e1cec725f49bc430537fa1563d746cbdcd74dda03413814266d2cd187b5808b8c3e7ef1ce343e2191d31493b252dc0b3cb3746b97ccfab8d822a32c7763d3708efd25fe79f4c96dc1df729739b360ca4086bc3083a2fbe569c660134586e116820a722d172e7d5a107985edcc9d1e4aab09f06c57ac4a0d40f6b81c83a390cdcdd1ae2aa9ca9bc142cba0d2f6272a0052637478b97e3e91ef6bb66380f46361ce6a73796f2912fe0d2e91111d75ff6a37142e54c8802dd645a68e66a18541da9638e8e0dd39458430a1e9fd46db92d26b67a2fdf165b3e58ba3862cefa22ac55715f60e2ae7acaa8cd5552f3cca4665c72eac33201c467a0b4fc27009f4ca44c832aaecb2df2a8d65238b56bfc34fe62b394a77a8d5e5938e995bc23fbc5ee616c59b06cf853c252238dd0803cc4d8b19bce030171319b5a14460d54bdb7b9e5161e69f7ecf1448bd1c846a4509d1e0000531fe59c3ebb5ad03b74db8ceeb6e8962b151eef2ff34631d127d7502fc06a825e16ec5f02ae743395da2a972e1fcbc82bc00ce202076326bfa83291763022efba2294894f2c2701b04dfcbd86673ef483475fa33630fab4c7b3abf9b8bdb9166", 0x1000, 0x20}, {&(0x7f0000000100)="c99484251f7b65472041aa089d30a3f49de5ffec95181c95b0bad6417dd490b3a269a214d13f27fd561a5e93aeb02c08ca7d0624eed3e31460391a2d782362dff8a33a2cf2296a503b0e85478a59fb0ae46e3f11277b82db255f83a8652656125f1d53f33fb1cdf1223555fd4df455c33bd3b9180526e7d80074dc9afeeb8dbcf01d71e5b1ec450a2d7b7e5114da54f8b8aaf07b97103b8109811eb29ac0424acb99ac011ffcec7890481507f0eca8191b25ff99c846d63db592270625a18fef9933f68e88442617b0a30311bcbb57cd10f5867e1daf31", 0xd7, 0x3}, {&(0x7f0000000200)="d69872e6fd87f1ff53fa1c1e1101b4a1e3b33e922ba3a6faac79b817f519cdd60c5fc1c1a1b10ee5039489428fb3f885d789a466b2ced0286cd19ecc8bb74993e9bf774075ccba67c7473f7a569883497462aaca94a36734b4a0b6d458ef831a678f89bee067f358465d84894b193ba7b474fc6ea2a4630657bf18bb3b5c8d31e762ac6ab019a85f6462b85ea507d9071053593ab0265ea754", 0x99, 0x68f9}], 0x0, &(0x7f0000001380)={[{@data_flush='data_flush'}, {@acl='acl'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x5}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_eq={'uid', 0x3d, r2}}, {@seclabel='seclabel'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r3}}]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001440)='/dev/nvram\x00', 0x581440, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000001480)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 22:23:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x8982, &(0x7f0000000300)=""/178) 22:23:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 22:23:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xae01, &(0x7f0000000300)=""/178) 22:23:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f99800]}) 22:23:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x3, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:08 executing program 0: lookup_dcookie(0x1008, 0x0, 0x13) 22:23:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x3, 0x4) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0x0, 0x8, {0x1ff, 0x4, 0x9, 0x1}}, 0x20) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000040)=0x44) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, r4) sysinfo(&(0x7f0000000180)=""/44) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0xfff9, 0x40, 0x1, 0x8}, {0x6, 0x7f, 0xff, 0x5}, {0x200, 0x85, 0x0, 0x6}, {0x9, 0x7f, 0x40, 0x4}]}) 22:23:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xae41, &(0x7f0000000300)=""/178) 22:23:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x4, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 22:23:08 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000200)) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x186) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000001c0)={0x1, 0x3, 0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:08 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r0, 0x401, 0xf2, r1}) 22:23:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2820.575755][T24462] validate_nla: 10 callbacks suppressed [ 2820.575766][T24462] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xae60, &(0x7f0000000300)=""/178) 22:23:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f99800]}) 22:23:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:08 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x418e01, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x4c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}}, 0x4010) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) lookup_dcookie(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) tee(r1, r2, 0x4, 0x1) sendmmsg$unix(r0, &(0x7f0000000200), 0x0, 0x4000000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xa20000, 0x0, 0x3, r1, 0x0, &(0x7f00000000c0)={0x990907, 0x0, [], @p_u32=&(0x7f0000000080)=0x4}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x17, 0x5d, &(0x7f0000000140)="cf110d8aec913a6b32a4f589eb6daad38669c16e1c36fd22a39b399fa80d35b3c32c95d4709454fd8d2a1c44adb026eec262968fd5843e025ce28dfa62e1a42ad221217e11d1c819c4015478ea544326235561e7c08e8323c2033836af"}) 22:23:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xae80, &(0x7f0000000300)=""/178) 22:23:09 executing program 5: eventfd2(0x0, 0x80001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000080000000000000000f10000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r6, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x80) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffff00000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000814}, 0x1041) [ 2821.073872][T24702] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 22:23:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xe, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2821.191136][T24710] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x400454ca, &(0x7f0000000300)=""/178) 22:23:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f99800]}) 22:23:09 executing program 0: lookup_dcookie(0x0, 0x0, 0xffffffffffffff3d) 22:23:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockname$ax25(r1, &(0x7f00000000c0)={{}, [@rose, @default, @rose, @null, @bcast, @remote, @rose, @rose]}, &(0x7f0000000040)=0x48) 22:23:09 executing program 0: lookup_dcookie(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x8000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) [ 2821.735862][T25034] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:10 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f0000000880)="b6be1f2b06513bd5959341eaccd173668e40fcc96c9e988ef16cb01edf8cbb19fa1f954a7447f33ec11e5d22d6eadb3ccb15625f7dbcacd9cce7777fd8f14cf25ab6f2c26ee8f84dc3beecfa5571519d240a68a551ce8ecb8a3cf55e4c1d264975ccba38800dafd715ffcf699cbb1074a497ff2788ae568224c28877b075b1ca8efe22ed21efa3b8af53a0732b828554073bc262856fc732d4319b918e9d5d7068171c2bb12379ac0dd1353b0c0f056a1839539ce6719238ef3388ac9bf36885293c4d7edadb4eedd64ae8c6d92ce80bd3c4fcc01f80f42439dcd0488675baaeedec2dfba7f6641c80c1488e2f3f3fb1c988e42c8acf149dc1eaaa37012d6691d1308ab045f54750e6599d2890a782afc10ee50aff38a7b31419ce6073a62070e676f049178bd222c8e810e626c18c1308281f8b6121476d60c007c0651a61017b0242ddaf5be17e9306c7f456ae078c48b5c16153eb0d2d546b8c139aeb70c03a92e2a64efdb1824cc634ce5054ae0a9c748ee5b8aa108999aeaf19ebc352c82ac6a3bd9293e47ea0c7bb1ef99c702d105bdaa1b996c028319f83571a12d56acd5389839f253d916f9c10fd321bdd6b68a6694b7146795ce9839377037ab2294ea0ccc01ee671517c3fc6242d692e7c29eb772df44fd08046310ae65dcd0a244028bcfc613d0772829afef1a2b54671303896304db68120dfefc4305a8787884a8c45fb4c725ea14e042092ea9a446a441593cedc46c273a7fa074ccf140c0b5eb1cebb0cce93b0622f48c09397fbcd2a798a9df52fbeecbf26034b7cceb497569ce16295bcc3109b3d17d2e78c4e3d0b78817b499b792236b8bb93687ad0bd4a68e0c8b38fc0a2c0955558e50e51fe01365b4e44e78ca2eefce5145b0b6ea82a32bf022cabe8d1a8f6d08503c6ff1ede8d2520793e6db0651847930f468ecae4031d488ab2e383e71d9ad9c96cb0fa7536f8da512ef1c8cd64fb5d1b5964523823dfea58211d8e5cb9ed2f3314ee57c04dc7556e7569961305b7769ade33bc7a4cd8981c970880d4e6a43569e2211260038a416c286fdba31e2b8c8eff25af894d644854c7628ef1152ad03f60f1a0c29e282c6ddfaa4dd4d7b0bb8652206ea692946daa2a3499be8fc0e178b720e0cf5a72ee3c00f2cc8c3277cf354e45e8b9587432935a4b3ead08b4338abb807d1f3ac86b31a95985fa467419004e1e206d9528c77090ec607bd3e14b3aeb2a92cc2f72e0005a42d5bc8ff5c9ff057e3875f18072da1709548affe20bd5e81e77d14abe212373194992afb7369f65c77b20206ad57c5abd01b72c0c9d4116d2d77fa664713497df38ee733135c43a2dea8c58dd47d802b03d8f02324bb1c96301c7c608979469abb73d0bd3d8f285dd191e630b5ae953f3095dce23b1120a0c441755ee922fdcc03920583ebf483e4def66e9862a67aabade78b41b5ea86c6b8e55f298d68ecd244c12848c2d4bf2893f408e5e4712df30268d9afbde24b5cf4a591ebf88bc7aab7acac8761dae83db60098c57d32b437274678a2319847cc075215089c2e8147a2a2d71380eba1244cb0a653615dd8f4aa7891bd95eb445b862350164040d3304935a8320b06047f689439aeb7eae940aa405044f8960fbd3a9b1ff8f75a29803c97a8e4a5fd98a7f7413b2ac53dde684b486aa819ec2eea2d2f3a29bb370f57df3b972bf751812d41d3f606e1800f43aa0cd44cc164416392e20e8a6222e64a59e3974168e5720728e3386c834437d3a53ae0e90d79ef2a4bba64484859856035921a56232f7a1d4f047359d78451260a756ba31072cf839c3255ec4d75858728743741137b70dbea3b134ddf0f7ac5c800500b4c0423a4a498c08e4ccbd7b75442b451196bc58724a9732b7dc20c4fa80616ffee000d0963b6394cdc3fb9a1f16929317b219aa2b49c28698dd8a4ba36b405842786eabb306693391a4f488dd1f7f3ad65fb1d4b35ff5ca6e0e2e41ccc2231b6499678028c6e3b588277fa16097d77dd385d8a5e38c02263222cfedd7b0d12ec1d51b5a089fafdc1edefc366b7ffafbc382ece00e10681b690b445c56f9c69abdfa6043a4a04cb2406e7242caf62fc30dcb1cc34eae20a05b803938b9309d1c7fec76759844d8f2a8eca85cc7cd026545303c666dc5db111900e05658bb852e42a448c9785496aba6d210254a4f1b87eff64159e2c51b03a69cda0896018a76bfc3001b0e8669b9cc7259a363998cd9d8a6461f5369ad9863cd1fb185d3134ef624a0c89c8a9f85c5e6b9e1fd1ad89f2e461f4dbffc25eabe356db57998caaef1c01e8438813c5a5c27aaae97b6f0cc868d6bf8eaf395c77ba48324ae6bba7a18fb15801f0d7eb5532a88dabc968b9a39131c43e131523b88b46bf115c822fb965801991b05dc8be91b374a1804220a3d7ce75f251305e6f1fb6e47def59ad45a78c7a5434411cc1f773f49f0b17ce74b1e4156cce73b3830ef027de7d0fb7f4c6ec6ef6d00aeaf16fd193c0133bfe87c5977f6eaabf7844585d32d114d788404071fdf38606777c48af65d49112d45a35bb61de6b8b404c4a6c74ac51893e79e330c7b8802aec125d5007fa7d075a00417e473a9420d32ee0fef94f612a81db07799eadbf9ad321dfc23230aa7787581eec575b9e3bf3dfe0af9198854d509a75a3e5811e55ae9c1178de03dbc0cdce5a9cddd28eab51a4b53d3062f9db7a48cc8c8b54277fc79943920f968dab1cb10d45487cab73f359173ef835a1d05897a39e3b27f45c520fe844e8a08a85b3aadb0022de2de8c75687366dbb5585c6482ac279a668f47978ae6844b665d2f71340c4d7b04380f80da4eb90b0c14cde080b39e691db09dc460af906314be4dce042514aa7c6f27e0d2e5ebf0ecd36281bd97b37f959a88156241bc3fac0c493c07f1e82ef0a17bd08309e74d5610aceb3f039e5bbe336af57336e99141f5dba1b2baf65a29a9a309425e0db9b045edf58c7a8c7cb88134b51f966cb662f977ed4deddd06afb70ac633fd527bde90d5bb19cab83ec94f8f660f0f2f4468a3dcc400e9b4211e2ce901859c1f24e2c832cca0e6c4dc6492a4818ca4f737a0bb77904bd3e81b1ff0105f46b4eba6cd7c29a8efb19df012693d041c4b54ed9d32bd34cf9a87a3afa42f84556c3ac723d3564cfacc353bae1f38e89c1321fe92a525e2f2eda4128efb57c33c0e0a33b720d8476d498c6c8882ed62aa632875a297ae06f39cf6809b6feb2678cca1a62b37b9e42706be2fb058fa10fb0a3004f50edd9ffda5f7d9939a817a11d1899b3447e0a3b4ce962c73016d9b48c253d7ffd2f7f809805a6b43f96c9be476b4d0623c75281078a9635bd758b9065c9a0eed6f2d694e03707728af067a3af2c37d04da7d7cf56dcc1666162ecf512a5b9b8d0cd57817d0e79ff67d54530dd65af55cfc8b7af80c643d23ccee0ed6861cc6f4586837e384596d1f71c493917c38ed4948d82707e4bdc315cc222d5b6ad7f64d45f1aa96b52656d4d1a63b0f1564dd41733c648f0ef29989098df19be34d78842faf3bf6c8aa5d266439843c7019519c494ab2abbaa3e68a8b75ebfd5c08730d69ece91cc1d15723c7b87fd59ae68293a7202940d74f75c5618feaaac656a94e877167942a33a10d3cce638361e5e55c52735f4c25405d68db310c60951ceff963b814af01499b65828148e901cd5febccb377aba8ea771be0bdcc4b75d9c88eaf0b7a4d242325d382b72b9ff24d87e14ff0eb0002830612b0c469bcf731708a4d16856ddd9cbcb8e2e7b1d93877b1ab3af7157cb62ba5d36072c78af6679beb389e3e34ef678de6c7d5316ce340cc0ce14df5b2700011ee5426e329fe339ae6c1352615e5ea6d7b1f93562bade6b68723010b744ff4efa66438b54b3f5acd811e383c4d432f10c5720b138dbb072f40b7fb4f21baa50eefcae6c52833a7ba0c13d9958593d5c2d79aeabba0e803d5f03711dc9ab9b1e3c060ccd4ca2a8784b450dcf0c3c87bfe1af5e5e557e58e797ca4d36c33c966e2c046246b76a560778b8235654df037cf59c09e6e1a6bc8d410d1ab255d3c6ed11e53e42cac11776ff699d2a714a12986e607063599ec1c0500479333800b53d37ecd92b335cff64396bfefee90f8db17a1932ad63a459266b76af1ca5304090fbe267d30742c0f7683a3320196d6216e9f3ffb573d3ec6cad86060aeb6de53c2653f80dc8d06f22d3c394a9cf923e728c1f5ce61d6ed7c3775643d2a93e1fc5184a9efe480864973c25c9c19dc5ceeea6dfab8458ca534b7ca0c983048b28053ddb380e19aa982fb87a9eedfd47b27c47fb35d77416120f102e43be1794257ea8ff9c8462578df511be1e1a892c11086b5679cdbea2f07c9f7f1b56bfeb5610408a8e780c8a45d12a92ce0c935de268c46f9ca60db90f6fcc1d534e120f0d7c15aceac9bca22dfd63dfcbbc7e62e939199d7d2bac792930a1717c2137e6417efe776f1b1fcef966a8c71ae275db4ad600f4d3015151ab45296091e3b13d05644f2d39f8a6c57358bca707ea1cc9da06e91406f6731428cfb43371addaa804e3d4f5c0c46cd17075579e4daadd2da0426451c6a1fceda8ed47d2d244b9e7d29f9d9865e8a58085e06858be9ab082f9eb5336b5bc81df837f4aeba7118cf0702c14be0c2423bf44120ef684acd20b03f671ab2e4edc5da768eddd59fa14fd48d1618a697877674fc07b2380a50c764afd20a2250f3f40b2e66741ced56f786b1b6eaed1de71a45fd88e72f2d03af2dc6277714bc743bd0d49ecaa57c0184daec16572cbff394834a02109a6bb975f6b3ae5c458a4c84cef7cf0d4fd85680981254f265ac9de44f17485bf30785dcf96332e4cd5b48968a69130f60dee2f1c3966da734b8a7bb759240d5cb6f6b2c4aa0af059041baf6342c455d7596dcdd3a6fbfc1766d1b78a9b1829516de2e7fd30735445692a533e91d079d0c175bb925ad83f4d7d09feec41d24936c1bb5437a94cb8d035c99d0ea6e167076563db0123f5ddbb19ccff52c6fbb97e0bb07eef176a1004737008102be1a814f1601ab7472a4a69a8f72f3b708b2c7277199c436fd4e0be7076d75f2ac716cf0639e32c4b5347cf907d17a3d7ff0c31036c9b3e5711eb1a232a98d4ffcc795806076b52f81a3daf7f5561ebdcb5b47b884507cab9f6cc9b5a40054b5744de74b7be4fccce142a8248cb0c4641f12b0eff76a17901ec7bc8e4097cceb180e3a105f053b3dfe6cdacc4d24edf49d133fef2a13c01750dd6671959337b172531609ad8f5c030cfa7eb12c0cdcd50b6a41183c7d0b71cc0896943034ad0cb3c99a58295c9397c2efab35078e95ca54aa794c3475106686bdd025ede5baa317b32db2a82e869abf879e2c8ec8f005763886ef1822da5180d19e4a18cd118128b2f3b2be65883d2fc5fd0d8e0518885737fe5bfde8dbb09bb8c110ba5d4c818c85dfec731016ee30d6d46a716075d4f831fd569c6bced179e9a0d7c224c9b2322eaa352806d0b5a7bcfe74e56e9dcf6feb2fe04d8126f4979b56bfe4ba30944ca931e759d3250ac2b812613d1a7551bc2785f29b4348ac9feb65f91880bbf3ca932f9d46eff1c84709b4da765bdcc974003e67140e3301647580964189f4c19267b8bcf0aeeead2da8092664291681b482ee81c322860fb2684009feb1dad4a419b91a6ebd151dc6be6d42311583c5550fbda1de0556f6c9a7bc077e9e19ffdd630b572e2539a7d42ef288cda85a4de4ec7f9d1dd478264ac418df", 0x1000}], 0x2, 0x0, 0x2f}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x40049409, &(0x7f0000000300)=""/178) 22:23:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x60, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd69, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x10) 22:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 22:23:10 executing program 0: lookup_dcookie(0xffffffffffffffff, 0x0, 0xffffffffffffffec) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1b) [ 2822.180803][T25455] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560e, &(0x7f0000000300)=""/178) 22:23:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4010ae67, &(0x7f0000000300)=""/178) 22:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f99800]}) 22:23:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x300, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) dup3(r0, r2, 0x8b962a5ed6ebd0a0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x20, r5, 0x70f, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x354, r5, 0x1daa1650b57e17b7, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50f3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa291}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3b34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe838}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x400c085}, 0x40000) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x100000000000036f}, 0x20000001) [ 2822.682812][T25571] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 22:23:10 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x8e001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfffffffffffffffb) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x86000, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) 22:23:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x700, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x40186366, &(0x7f0000000300)=""/178) 22:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 22:23:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x24) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) [ 2823.079716][T25789] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xa00, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4020940d, &(0x7f0000000300)=""/178) [ 2823.235399][T25844] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:11 executing program 5: r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) 22:23:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xe00, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4020ae46, &(0x7f0000000300)=""/178) 22:23:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf00, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f99800]}) 22:23:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4090ae82, &(0x7f0000000300)=""/178) 22:23:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) socketpair(0x28, 0x1, 0x62, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rose(r1, &(0x7f0000000380)=""/4096, 0x1000, 0x12041, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x53c360b0]}, 0x8, 0x80000) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) fspick(r2, &(0x7f0000000140)='./file0\x00', 0x0) 22:23:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x5437, &(0x7f0000000300)=""/178) 22:23:12 executing program 1: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x10000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x48040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d00000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fallocate(r4, 0x8, 0xdc36, 0x5) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000840), 0x8) [ 2824.141672][T26229] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x3063, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) keyctl$get_persistent(0x16, r1, 0xfffffffffffffffc) lookup_dcookie(0x0, 0x0, 0x0) [ 2824.187007][T26233] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 22:23:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x80045432, &(0x7f0000000300)=""/178) 22:23:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 22:23:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bdc0fbb605000000000000000000ffc10005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x440000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000000c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @dev}, &(0x7f0000000140)=0xc) 22:23:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x4000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2824.562260][T26350] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. 22:23:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:23:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4c, &(0x7f0000000300)=""/178) 22:23:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x80045440, &(0x7f0000000300)=""/178) 22:23:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x6000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f99800]}) 22:23:12 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001580)={0xfffffff, 0x7ff, 0x8, r1, 0x0, &(0x7f0000001540)={0x9d0001, 0xfff, [], @string=&(0x7f0000001500)=0x2}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000014c0)}, 0x200408c5) 22:23:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x800454d2, &(0x7f0000000300)=""/178) 22:23:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:23:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x6330, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:13 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 22:23:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x80086301, &(0x7f0000000300)=""/178) 22:23:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) 22:23:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:23:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2825.408698][T26683] FAULT_INJECTION: forcing a failure. [ 2825.408698][T26683] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.513880][T26683] CPU: 0 PID: 26683 Comm: syz-executor.0 Not tainted 5.5.0-syzkaller #0 [ 2825.522381][T26683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.532455][T26683] Call Trace: [ 2825.535772][T26683] dump_stack+0x197/0x210 [ 2825.540127][T26683] should_fail.cold+0xa/0x15 [ 2825.544746][T26683] ? fault_create_debugfs_attr+0x180/0x180 [ 2825.550690][T26683] ? ___might_sleep+0x163/0x2c0 [ 2825.555575][T26683] __should_failslab+0x121/0x190 22:23:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xc0045878, &(0x7f0000000300)=""/178) 22:23:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 2825.560640][T26683] should_failslab+0x9/0x14 [ 2825.566139][T26683] __kmalloc+0x2e0/0x770 [ 2825.566158][T26683] ? mark_held_locks+0xf0/0xf0 [ 2825.566172][T26683] ? mark_lock+0xc2/0x1220 22:23:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x34000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2825.566189][T26683] ? _parse_integer+0x190/0x190 [ 2825.566213][T26683] ? tomoyo_realpath_from_path+0xc5/0x660 22:23:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl(0x400, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)="623da795086a066438abcf216612626116237411eea662a037e0aefae0dc2c86b0bebaba732abec8a44d08817cb5e43364cf9fbbd3fc40b38e09213b03d2f34239c6a4ff1fb0346c27d9df5e038f74f306866d45923f8986f92d69a85db580e3be26339d5e6d0031325a513049bf167666d0e4a01f4abea4f52f1d250deb58a8ac72ed68f521bc6b39042e8044603c2da96dfe571799b07078d2b58a017da2ca36e999a8679af10e7799") r2 = creat(&(0x7f0000001400)='./file0\x00', 0x41) accept4$netrom(r2, 0x0, &(0x7f0000001440), 0x800) creat(&(0x7f0000000200)='./file0\x00', 0x20) [ 2825.566237][T26683] tomoyo_realpath_from_path+0xc5/0x660 [ 2825.566255][T26683] ? tomoyo_path_number_perm+0x193/0x520 22:23:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x400300, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2825.566286][T26683] tomoyo_path_number_perm+0x1dd/0x520 22:23:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xc0045878, &(0x7f0000000300)=""/178) 22:23:13 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) [ 2825.566301][T26683] ? tomoyo_path_number_perm+0x193/0x520 [ 2825.566325][T26683] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2825.566340][T26683] ? __f_unlock_pos+0x19/0x20 [ 2825.566417][T26683] ? __fget_files+0x359/0x520 22:23:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f99800]}) [ 2825.566459][T26683] ? ksys_dup3+0x3e0/0x3e0 [ 2825.566478][T26683] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 22:23:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2825.566498][T26683] ? fput_many+0x12c/0x1a0 [ 2825.566534][T26683] tomoyo_file_ioctl+0x23/0x30 22:23:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r5, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xc0000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x14, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x2}, 0x8) [ 2825.566561][T26683] security_file_ioctl+0x77/0xc0 [ 2825.566587][T26683] ksys_ioctl+0x56/0x180 [ 2825.566613][T26683] __x64_sys_ioctl+0x73/0xb0 [ 2825.566635][T26683] do_syscall_64+0xfa/0x790 [ 2825.566659][T26683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2825.566677][T26683] RIP: 0033:0x45b399 [ 2825.566698][T26683] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2825.566707][T26683] RSP: 002b:00007f78bd8bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2825.566724][T26683] RAX: ffffffffffffffda RBX: 00007f78bd8c06d4 RCX: 000000000045b399 [ 2825.566734][T26683] RDX: 0000000000000000 RSI: 000000000000540a RDI: 0000000000000003 [ 2825.566744][T26683] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2825.566753][T26683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2825.566766][T26683] R13: 0000000000000552 R14: 00000000004c69a1 R15: 0000000000000000 [ 2825.813900][T26683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2825.839505][T26807] validate_nla: 3 callbacks suppressed [ 2825.839516][T26807] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2825.857975][T26807] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2826.285889][T26973] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:14 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xc0189436, &(0x7f0000000300)=""/178) 22:23:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 22:23:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x1000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r1, 0xdcfd3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x1104480, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2fb71524c4302c696e6465783d6f66662c66756e633d46494c455f434845434b2c667375612d613334092d620333632d37356336623066632c2c7375626a5f726f6c653d2c6f626a5f726f6c653d2e2d2c0f00"/102]) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = accept$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000380)=0x1c) getsockname(r3, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80) 22:23:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f99800]}) 22:23:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x2000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0xc020660b, &(0x7f0000000300)=""/178) [ 2826.713805][T27241] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf99800]}) 22:23:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x2, 0x0) 22:23:14 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x3000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x10, 0x0) 22:23:15 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xd63, 0x501200) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x5, 0x1, [], &(0x7f0000000100)=0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0xc96a985aa291e60, 0x2, 0x3f) timer_getoverrun(r2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x600040, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xfc, "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"}, &(0x7f0000000380)=0x104) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e21, 0xff, @rand_addr="2fadb3caa2edfa9c0aeb4be73f4cf17b", 0x8001}}}, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000480)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x36, 0x6, "0f42943efacea062afae6da915e9b0677317cf783da18b3bb42c3ce194f9cb5747e79834dfb3c8b5e717baf410e8cd5e6e376461fa4a65a6b3205568a22412", 0x23}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000500)="1e4878c12326deaf500072f624317ad207d4f7b57bfa8445250644ea356ca2cf85d11d23aa3504f97c4246327a86ccc3f0507ac66f82452a2a46706befe0e2437422ee844a4282bcddde8ec79cc7c91053fcdb45234a7e2584999bcc30bbfe57471ba0a2b7596bc293843df119ce62c3024a59ee67228e7c7692325ac744bb2f936c1c0e8e904aafddc46d6ae835ce70a2b07cbda6067c885a22fb2baa0957ba95765d01f36c643ba8a3f735d00caec77be863a07b6baec842b356509d5bc0e24bdca702229031ce0828c8d43c9b9a250037c38a9b745e578a7c7e3c879d110f4d", 0xe1}, {&(0x7f0000000600)="876ed2fbad3f90b5187096bc986b9e930ac8add12cc8d99aaa7b46971038090e0559af45021bfbe47f805382e4e63a3e85eeadd18093f4795017798bbd34f56b61fca83d232ad94cac16061d2d0b92c64474216053c0670b8ed99a091dbb834e0b9c855bb2bb5beb010e49657e7647662b3e3bc1e0961e4f2ef437b8a314663c62ae82f32b40968fb13ff96605cc67f07272c46d98b283777a667e5563d830a88c0ba93fca207e63579e9a5e26cb70bdeec4d003b42095258c1569ea5f7482508b5d52e3888ac2ad", 0xc8}, {&(0x7f0000000700)="8307e600d4d610b7eb20d7308d90f8968a87050d388561f896df72610a1b3f48bb7f56c8f3ea62dd22495d55de9cbcaead2ce63c1781b4a8bf1a6bc2089f4b2a2ef41466872aece9114f423be9cc1b7f1f92f47c6b3bd57adf838639ba2aa7d19c689d3a19509997a913a27eab93ed2a696c954eae555567ea720bcfa9a58df90d85888c", 0x84}, {&(0x7f00000007c0)="3087f0ebe0c063660a1605fa6900fea9d61baab9661b2ce3413d2e2fb9c879eae9cf62f8513da71bf068adf6386b8c09ee8cc2528d4281a8c73e8d9bc9e136e7f3a7fa6f2bccfb540f7e3722ef1226766c41b0dfe4fdfd462a6fa6de9e9f2bd136d4853a8b6d4339e10e81154fbb007080ade243e732ec5526bce73bbaa59a0983d77d2457f368fdb7cb9fa888b82e41d34b6f5ec8495bf3bb99d5e0f4745a13de6e2811cd284fd66fdb279b6557833411bae6b7c83e146a2c515ea8a3e31dfe3c02e216966d12f706bfa552165af48f2792b547780cf67be2fb08f694f8d7ea9dbd92dad7d615eb8a1d7810a05da981689fd2dc76ba472d12", 0xf9}, {&(0x7f00000008c0)="1fe922b4acf167f1475646b79c46db4f5114ac25f4dec781a1f931fa23a381a38e73c9ac7a02e484531196727b5276", 0x2f}, {&(0x7f0000000900)="22292febea5eddd0befb9ed44ee834be5a3ada6f1fb7ccdd59fa34847383062adedf2417d2d3bcd7e301713c89c9e9348647d6bf0117ea72d69850482b292ca93cb02de890e1268c7c8c9f5f85c97b7bfa3c31614401931526230ecad14d781c541cfdae1714b308326164bc980698fb2af2af6bfef2d542b0da491f720588807f0453a88fa77524c7e93596a79859531c5338c6db7bdc54547e558cc5e0f82e4170e2c58da5c395cd967b0ea5a527ec6aac7a486ae6d409048d056a01152e", 0xbf}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="391930e2bbe7ed15207251723cd8a65f13", 0x11}, {&(0x7f0000001a00)="077d339607ad13742bb523ae1a6151fa62", 0x11}], 0x9, &(0x7f0000001b00)=[{0x80, 0x10a, 0xf0000000, "548eed4eba37ae20ef24fe4fe08bb5c68a9887099f4a40c153a3d26953fc62c7c59f83cc6b9854b33b7398e2f85862416760f034303e6a76356ef3c93ad32f8215b0f35f294df4e7b5546ff8f784138d5bf158a71713b08a9147b8f13177e7b0cdd9cbae45128d70fca72dc3d4"}, {0xb8, 0x112, 0x4, "f52ef448f6ab411a7aaf944418848fb56a4685d81b4498e392fec7b6cbc8db3142d7951f52e0f98b8f648e981f39ad5684389deed26704081802690dfc5369cefda9731c785f1ce3327e4621da41f2f678a5bf9b92adf6460e3a5a01996dd904650b64fe14b575b764ec46f69bc20c00c7754a910f4af19620765395b7afa8ce9977fbe2326c6db32e87b6d3a04828f8b2a07b1e080d7cc2f6aa8ca05941ccf2b1"}], 0x138}, 0x20000040) [ 2827.235162][T27370] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:23:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x4000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b2f, 0x0) 22:23:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000cab000)=0xc) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) 22:23:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf99800]}) 22:23:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x7000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:15 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26f0f000]}) 22:23:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b30, 0x0) 22:23:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = accept$netrom(r1, &(0x7f0000000000)={{0x3, @default}, [@null, @rose, @rose, @bcast, @bcast, @null, @rose, @default]}, &(0x7f0000000080)=0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r7}) 22:23:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xa000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:18 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getdents(r0, &(0x7f0000000040)=""/65, 0x41) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}, {&(0x7f00000000c0)="72b2f6115de854b7de438635d1cd95e78470f6100763718007ba090f8bed33c53ea931355af6d4f16b03c8a9a7bb2d317793b75aadbcdf91565dd348bf1e31d24b4f37f0ada3c18f827141ba9e3ee9298cfac1d2b944008a59ebf8f430511c596391593df9b8b069218227ab8605859d338500bf306ee56eb4cb", 0x7a}, {&(0x7f0000000140)="0cacc78d6fec4a24bc9499728bc8255f54318aa1475df76c4bbe7d3cc394ded8da31ef65c7c4d58983bd7747871ac76e77d7c4e203f462d1124f87f1ef8cad01546fb638b6be6f3f83957da2861d546d07f7ff906c30f33ba4d10a21e99db5e93c629a49344d33623307263414e59e08cfa48d8c3823c30ab0b2b32ca2be8cd8574d892d43be815916d0a39e70ecbbb3e5b1faa527d5a52cbe3a4e1ab130aa5253d6fb7ecef333bc52b30d3f750f97fcdaa7a2d7a15f5633a9d660a7318e6131599d365d063033ca9cb15a777139e75a2d160fdbf41d2272cb8c8a", 0xdb}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000240)="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", 0xff}], 0x5}, 0x4) 22:23:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xe000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b31, 0x0) 22:23:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f0f000]}) 22:23:18 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101100, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r2, 0x4b4a, &(0x7f0000000300)=""/178) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000180)) 22:23:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/178) 22:23:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b32, 0x0) 22:23:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2830.355569][T27913] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 22:23:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b33, 0x0) 22:23:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$P9_RLOCK(r4, &(0x7f0000000400)={0x8, 0x35, 0x2, 0x3}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c0000003285aafe3a340dbd96db8e933d1255e848da9ffa2fdf8ccaced19ab7ef4ec75049bea20c51cba07c289d15a01ccc02af635d18191003846d262f109eb27b99389f", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf2503000000140003007bf6d71dea1b5829a177db536896682d14000300bd61cd411f19da964093e97155b71bf8050001000000000014000200fe88000000000000000000000000000114000300fe8000000000000000000000000000aa050001000100000008000400ac14142e08000400e00000020800040000000007"], 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xfffffff, 0x800, 0x5, r1, 0x0, &(0x7f00000000c0)={0x980913, 0x9, [], @p_u8=&(0x7f0000000040)=0x7}}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000140)={0x3, 0x4, 0x9c72, 0xd1, 0x7f, 0x80, 0x3}) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000cc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRESHEX=0x0], 0x1}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r6, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) recvfrom$llc(r6, &(0x7f0000000d00)=""/98, 0x62, 0x2, &(0x7f0000000d80)={0x1a, 0x204, 0x3, 0x3f, 0x9, 0x8, @dev={[], 0x3d}}, 0x10) 22:23:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x30630000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) [ 2830.654175][T28070] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 22:23:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 22:23:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b34, 0x0) 22:23:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x1f, 0x1, 0xeb, &(0x7f00000003c0)}) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$setown(r2, 0x8, r4) 22:23:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x40000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:18 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="a48460a236c13f2054e7a7e0a16364756bb87cfc5f182b2366344c85b652ebdfcb44d61a4c634f1e4680e1d7b82a621986e7e5504bcadbe38d12fe78913fe70989bcbafe1f6dc2a2a275b64158749c881139b0cb7963357bd0af3caa94fbfe6385451d1cf9b26431815b4a250404db8383f781c028081aa5ce4a13cdbf4452cb4c599d1429d9b3552bc9003645e8a01f864bb3679a97f1f34cd2350123071ce7806e08ef494ee64f9fca6a382617d8b855f9308e0ef46de76267cb5789cd4cb8f1c04de6b220f99c144478bd9f0cb677c818d5c9aa93f2a13d359935fc0584", 0xdf}, {&(0x7f0000000040)="2f0b90bd268f789767d7a770ef13648bbf0e8b789b6a8b802600122de36c9e2aa74755ed35032e2c099175859473547295c48e0809d26f6379399328c221f6", 0x3f}, {&(0x7f00000001c0)="86de5824b2c4f1a4fef16201c64a36bba4ebffbc72fc1a380d9d0f7a470aa02566ea808c1c232c23fbe9f6d1a69c5c143a76a12504f1636c3d9d531dc54618e862a5a04d850d8efcea61e0541bca04276ad633c0705ec447a97c4c93f9afa9", 0x5f}, {&(0x7f0000000240)="31aace8178cab3babe313caf262f8ad23bee57db7e3673f9738f5d1623693938a09aa3b577d8b9fe0d69a18d31e204b2ea1c7dc4ca7e78ebb1acfc9d531382be72dadf23e9d2bda03e8438b969b2300d26487a5faf7ce9b3818a3aec45751161e3ade62709683da12bf3b173b52e75cf1ea8425f5111c5c9", 0x78}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f00000002c0)="88ab62b962fe7d5b1ebd72ac9777299e8246a92b10ca65093521b357629ad3fdd9fb2e77bfed69b65223a506363fd907d861ead02102ac32df2694b91e89315a701e8fd9da94aa071d000086b0286b01ddfe8a2667f0a828b2a5", 0x5a}, {&(0x7f0000000480)="f02b100dbd2d0d58d12fb6da04067e1c098ed4401e0debcbcd9be04c075a86", 0x1f}], 0x7}, 0x0) 22:23:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b35, 0x0) 22:23:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xe000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x60000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f0f000]}) 22:23:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'bond0\x00', {0xcf1f}, 0x2}) 22:23:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x9effffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b36, 0x0) 22:23:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x202000, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x8}) [ 2831.463008][T28515] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b37, 0x0) 22:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf0ffffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f0f000]}) 22:23:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x418c00, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0xa00000, 0x6, 0x400, r3, 0x0, &(0x7f0000000100)={0xa00904, 0xfffffff9, [], @p_u8=&(0x7f00000000c0)=0x80}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:19 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/151) 22:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xf5ffffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 22:23:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xfcffffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2832.021561][T28821] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f0f000]}) 22:23:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3b, 0x0) 22:23:20 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22:23:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xfffff000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:20 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:20 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3c, 0x0) [ 2832.476125][T29107] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xffffff7f, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f0f000]}) 22:23:20 executing program 1: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000180)=""/178) socketpair(0x28, 0x4, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x3a, @remote, 0x4e20, 0x4, 'lc\x00', 0x34, 0x1, 0x71}, 0x2c) 22:23:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000140)={{0x2a, @multicast2, 0x4e24, 0x0, 'nq\x00', 0x3, 0x3f, 0x59}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2000, 0x6, 0xffffffff, 0xff}}, 0x44) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x63, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108040f80ecdb4cb9c00a48d40d02b6dd6be8bd6efbb60309000e0093b134f01b0004000000050005bb0086f4abfdd2b43c833c47531e8ff2640292d862d4fd7a7cededd9e44738cd6b", 0x50}], 0x1}, 0x0) 22:23:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3d, 0x0) [ 2832.912907][T29391] IPVS: set_ctl: invalid protocol: 42 224.0.0.2:20004 22:23:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xffffff9e, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b40, 0x0) 22:23:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xfffffff0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:21 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x109001, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d98a8be63995a58a8644eda3f004cb20000000", @ANYRES16=r2, @ANYBLOB="0f070000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:21 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) [ 2833.360214][T29721] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44f0f000]}) 22:23:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b41, 0x0) 22:23:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xfffffff5, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:21 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x501480, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x6, {0x5}}, 0x18) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000140)={0x6, 0x80, 0x3}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) 22:23:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xfffffffc, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:21 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/llc/core\x00') ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000000)=""/187) 22:23:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b44, 0x0) [ 2833.842897][T29931] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:21 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0xffffffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45f0f000]}) 22:23:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3b) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x101) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xa20000, 0x70000000, 0x7fff, r1, 0x0, &(0x7f0000000000)={0x990a7a, 0x80, [], @ptr=0xff}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4) 22:23:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x0) 22:23:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x40) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f00000000c0)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x11000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000180)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) r4 = getpgrp(r3) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xa1, 0x1, 0x5d, 0x2, 0x0, 0xe62, 0x10408, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xf3, 0x200}, 0x20, 0x6, 0x0, 0x8, 0x7, 0x9, 0x2}, r4, 0x4, 0xffffffffffffffff, 0x18) 22:23:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) [ 2834.329902][T30060] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b46, 0x0) 22:23:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0x80, 0x8, 0x1, 0x1ff, 0x0, 0x6, 0x8, 0x3aa, 0x40, 0x302, 0x100, 0x7ff, 0x38, 0x2, 0x3ff, 0x1, 0x9}, [{0x3, 0x40, 0x8cd, 0x101, 0xfffffffffffffeff, 0x1ffe0000, 0x5, 0xffff}], "6e4600c3face269b56c3aa41d8f47f14c8e807925372769361c84a84c5f2848d3a0f163fb69a81f1836c848f915467c85b5b641cf98eb49f3f3ad8787db511eb3f54a371690c3f4386073e117bbc17c2d787e4eb16ae515b59d96fd7cad63bc9d73b11cc06ca9a3bca8927f1c71fff416f5060f4d7e6199f0e31ec2edf8c914b4a4db171c0e224a4238f2feff140f52ac38fecaec1125fccaef63039526ce6d453987c161242659a8c03953faf8c581e292c2524f6cff875818e6e84339ee5", [[], [], [], [], []]}, 0x637) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) 22:23:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x129900, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x6, 0x17, 0x8, "0caf6c705bfb69a12ff39bf715d8684002f118cf80332be1540e407ba59499cab0954954b516c2c60710c5211571b2dc596a24d9add07723a5d4815397522cba", "022d11e71a24dd9bfd14030af6cab1eb592d0df95cd75ddfd9c95206000000971493574f0861c1ae8966eab3826e486e93159bf370b94e00", "2470067d23c7c5a37f8f91d86427c26c943d610a3b4c1bb2ddf263f2535ac704", [0x0, 0xffffffff]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) 22:23:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b47, 0x0) 22:23:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x2, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f0f000]}) 22:23:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, 0x0) 22:23:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = dup2(r1, r0) ioctl$GIO_SCRNMAP(r2, 0x4b4a, &(0x7f0000000300)=""/178) [ 2834.836365][T30484] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2834.913850][T30484] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:22 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x3, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b48, 0x0) 22:23:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48f0f000]}) [ 2835.181151][T30768] FAULT_INJECTION: forcing a failure. [ 2835.181151][T30768] name failslab, interval 1, probability 0, space 0, times 0 22:23:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff714c486c51c0ac8d86", 0xffffffffffffffb5}]}, 0x8000) 22:23:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x4, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2835.263339][T30768] CPU: 1 PID: 30768 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 2835.271747][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2835.281826][T30768] Call Trace: [ 2835.285152][T30768] dump_stack+0x197/0x210 [ 2835.289517][T30768] should_fail.cold+0xa/0x15 [ 2835.294145][T30768] ? fault_create_debugfs_attr+0x180/0x180 [ 2835.299987][T30768] ? ___might_sleep+0x163/0x2c0 [ 2835.304878][T30768] __should_failslab+0x121/0x190 [ 2835.309861][T30768] should_failslab+0x9/0x14 [ 2835.314394][T30768] __kmalloc+0x2e0/0x770 [ 2835.318660][T30768] ? mark_held_locks+0xf0/0xf0 [ 2835.323456][T30768] ? mark_lock+0xc2/0x1220 [ 2835.327899][T30768] ? _parse_integer+0x190/0x190 [ 2835.332774][T30768] ? tomoyo_realpath_from_path+0xc5/0x660 [ 2835.338625][T30768] tomoyo_realpath_from_path+0xc5/0x660 [ 2835.344190][T30768] ? tomoyo_path_number_perm+0x193/0x520 [ 2835.349870][T30768] tomoyo_path_number_perm+0x1dd/0x520 [ 2835.355353][T30768] ? tomoyo_path_number_perm+0x193/0x520 [ 2835.361015][T30768] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2835.366848][T30768] ? __f_unlock_pos+0x19/0x20 [ 2835.371622][T30768] ? __fget_files+0x359/0x520 [ 2835.376350][T30768] ? ksys_dup3+0x3e0/0x3e0 [ 2835.380896][T30768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2835.387171][T30768] ? fput_many+0x12c/0x1a0 [ 2835.391687][T30768] tomoyo_file_ioctl+0x23/0x30 [ 2835.396472][T30768] security_file_ioctl+0x77/0xc0 [ 2835.401439][T30768] ksys_ioctl+0x56/0x180 [ 2835.405719][T30768] __x64_sys_ioctl+0x73/0xb0 22:23:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b49, 0x0) [ 2835.410336][T30768] do_syscall_64+0xfa/0x790 [ 2835.414875][T30768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2835.420791][T30768] RIP: 0033:0x45b399 [ 2835.424715][T30768] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2835.444331][T30768] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2835.452760][T30768] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 22:23:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x7, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2835.460751][T30768] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2835.468746][T30768] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2835.476732][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2835.484723][T30768] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000000 22:23:23 executing program 5: socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x280000, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000480)={0x0, 0xfffffffe, 0x60eb, [], &(0x7f0000000440)}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x14, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r5, 0x84, "9038a5bc5ff3aa3d2f48a5abf2994baadccd2948cb04e9433b43180f4ebd19f2c4e562bcb008378a1896d194451830a94147c84db5a68ba1f34c408d2296f3afbc18e25e4196ea54daff5a059d427359ff0de6b86c7e503addfcdc8c999144799d73f6786f6fc7f13bea87ce70e4c0a3239d2a9b39abd063796a4fe3e7f6059098792c02"}, &(0x7f0000000400)=0x8c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000540)=0xc1) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x19}, 0x0) syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x4, 0x4040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r7, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000180)="36e6a415f5985bb9a7f491390e8468aaf6f618abd8686b47ad880e047344937d6f099a465089d0458529ca12829c916f63392855f3545952aaf4c50ce1cd562ac2474d53b3c28e863be8c79975067459a3c147dc8a0439493deeb7e5ae12a496", 0x60) r8 = accept4$llc(r7, 0x0, &(0x7f0000000200), 0x1800) getsockname(r8, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000140)=0x80) 22:23:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) 22:23:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4a, 0x0) [ 2835.694008][T30768] ERROR: Out of memory at tomoyo_realpath_from_path. 22:23:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xa, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:23 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff0f000]}) 22:23:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4b, 0x0) 22:23:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}}, 0x40040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) io_destroy(r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000280)=[{&(0x7f0000000100)="b00629f55198179394203f6be67aa7418c7e721e945ba8609954688ea67a6cfc1edb736cb24da77ed5df6e6a55f657d0b73aed73a14a2f2e06079098bac2d5a93da6ff7c0e9e2d89b53cfce6435bfeb9c5f001ea5becb59c492b296c3005f2a8abda49fe12fd87e646563c869d25b0a689414bb959d73c59ea085ca740021e0e48dc6e1d1a38b19b7267bae2e7fb59c22138a675d4a8a895423f678b9db3e0a9502bce49fb131a8dbac04075b929327a8fb38c2661453e", 0xb7, 0x100000000}, {&(0x7f00000001c0)="6e0501ee5027f43833e3cbdf47c2c22ea39745072ea7dd5458e9cfbb04aa8aac1654b113b5dee2eaf476008f9625c863fc1a5ea44bcfc08b87eed8b473f22e4575c89cf9d2c220ea513a8814270b386275c3ed819f24fa65d11c0f242db8c80faddd610b97d71cd4a05c60b76a984bbf1bc0d00f41ddebebc62f9b67d28616df49456f8444692da2367fa2afe2", 0x8d, 0x2}, {&(0x7f0000000080)="74c661c4d0", 0x5, 0x2}, {&(0x7f00000003c0)="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", 0x1000, 0x9f}], 0x2001400, &(0x7f00000013c0)={[{@flock_local='flock=local'}, {@autocell='autocell'}, {@autocell='autocell'}], [{@fsname={'fsname', 0x3d, '/sys/kernel/debug/binder/transaction_log\x00'}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, '/sys/kernel/debug/binder/transaction_log\x00'}}, {@fowner_gt={'fowner>'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@appraise='appraise'}]}) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000014c0)) 22:23:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xe, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2836.118079][T31137] FAULT_INJECTION: forcing a failure. [ 2836.118079][T31137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2836.131333][T31137] CPU: 1 PID: 31137 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 2836.139664][T31137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.149873][T31137] Call Trace: [ 2836.153185][T31137] dump_stack+0x197/0x210 [ 2836.157539][T31137] should_fail.cold+0xa/0x15 [ 2836.162155][T31137] ? fault_create_debugfs_attr+0x180/0x180 [ 2836.167977][T31137] ? __kasan_check_read+0x11/0x20 [ 2836.173025][T31137] ? mark_lock+0xc2/0x1220 [ 2836.177462][T31137] ? __kernel_text_address+0xd/0x40 [ 2836.182685][T31137] should_fail_alloc_page+0x50/0x60 [ 2836.187908][T31137] __alloc_pages_nodemask+0x1a1/0x910 [ 2836.193305][T31137] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2836.199044][T31137] ? __kasan_check_read+0x11/0x20 [ 2836.204091][T31137] ? fault_create_debugfs_attr+0x180/0x180 [ 2836.209933][T31137] cache_grow_begin+0x90/0xc60 22:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4c, 0x0) [ 2836.214720][T31137] ? trace_hardirqs_off+0x62/0x240 [ 2836.219856][T31137] __kmalloc+0x6b2/0x770 [ 2836.224110][T31137] ? mark_held_locks+0xf0/0xf0 [ 2836.228889][T31137] ? mark_lock+0xc2/0x1220 [ 2836.234020][T31137] ? tomoyo_realpath_from_path+0xc5/0x660 [ 2836.239764][T31137] tomoyo_realpath_from_path+0xc5/0x660 [ 2836.245326][T31137] ? tomoyo_path_number_perm+0x193/0x520 [ 2836.250989][T31137] tomoyo_path_number_perm+0x1dd/0x520 [ 2836.256462][T31137] ? tomoyo_path_number_perm+0x193/0x520 [ 2836.262119][T31137] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2836.267935][T31137] ? __f_unlock_pos+0x19/0x20 [ 2836.272687][T31137] ? __fget_files+0x359/0x520 [ 2836.277394][T31137] ? ksys_dup3+0x3e0/0x3e0 [ 2836.281826][T31137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2836.288093][T31137] ? fput_many+0x12c/0x1a0 [ 2836.292541][T31137] tomoyo_file_ioctl+0x23/0x30 [ 2836.297328][T31137] security_file_ioctl+0x77/0xc0 [ 2836.302292][T31137] ksys_ioctl+0x56/0x180 [ 2836.306544][T31137] __x64_sys_ioctl+0x73/0xb0 [ 2836.311152][T31137] do_syscall_64+0xfa/0x790 [ 2836.315683][T31137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2836.321581][T31137] RIP: 0033:0x45b399 [ 2836.325494][T31137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2836.345223][T31137] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2836.353662][T31137] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 [ 2836.361653][T31137] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2836.369641][T31137] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2836.377633][T31137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2836.385617][T31137] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000001 22:23:24 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xc201, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:24 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4d, 0x0) 22:23:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70f0f000]}) 22:23:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0xff, 0x4, 0x4, 0x800, 0xffffffff, {}, {0x5, 0x8, 0xff, 0x6, 0x0, 0x3, "4a170d60"}, 0xecf6, 0x0, @offset, 0x7, 0x0, r1}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'ip6_vti0\x00', {'macvlan0\x00'}, 0x6}) 22:23:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x60, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2836.680854][T31460] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2836.715249][T31461] FAULT_INJECTION: forcing a failure. [ 2836.715249][T31461] name failslab, interval 1, probability 0, space 0, times 0 22:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b4e, 0x0) [ 2836.753861][T31461] CPU: 1 PID: 31461 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 2836.762241][T31461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.772408][T31461] Call Trace: [ 2836.775719][T31461] dump_stack+0x197/0x210 [ 2836.780086][T31461] should_fail.cold+0xa/0x15 [ 2836.784709][T31461] ? fault_create_debugfs_attr+0x180/0x180 [ 2836.790544][T31461] ? ___might_sleep+0x163/0x2c0 [ 2836.795435][T31461] __should_failslab+0x121/0x190 [ 2836.800409][T31461] should_failslab+0x9/0x14 [ 2836.804932][T31461] __kmalloc+0x2e0/0x770 [ 2836.809198][T31461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2836.815568][T31461] ? d_absolute_path+0x11b/0x170 [ 2836.820538][T31461] ? __d_path+0x140/0x140 [ 2836.824891][T31461] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2836.830300][T31461] tomoyo_encode2.part.0+0xf5/0x400 [ 2836.835637][T31461] tomoyo_encode+0x2b/0x50 [ 2836.840085][T31461] tomoyo_realpath_from_path+0x19c/0x660 [ 2836.845760][T31461] tomoyo_path_number_perm+0x1dd/0x520 22:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b52, 0x0) [ 2836.851237][T31461] ? tomoyo_path_number_perm+0x193/0x520 [ 2836.856893][T31461] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2836.862827][T31461] ? __f_unlock_pos+0x19/0x20 [ 2836.867596][T31461] ? __fget_files+0x359/0x520 [ 2836.872305][T31461] ? ksys_dup3+0x3e0/0x3e0 [ 2836.876747][T31461] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2836.883008][T31461] ? fput_many+0x12c/0x1a0 [ 2836.887453][T31461] tomoyo_file_ioctl+0x23/0x30 [ 2836.892261][T31461] security_file_ioctl+0x77/0xc0 [ 2836.897233][T31461] ksys_ioctl+0x56/0x180 22:23:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2836.901503][T31461] __x64_sys_ioctl+0x73/0xb0 [ 2836.906118][T31461] do_syscall_64+0xfa/0x790 [ 2836.910655][T31461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2836.916662][T31461] RIP: 0033:0x45b399 [ 2836.920583][T31461] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2836.940198][T31461] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b60, 0x0) [ 2836.948738][T31461] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 [ 2836.956761][T31461] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2836.964749][T31461] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2836.972742][T31461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2836.980728][T31461] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000002 22:23:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x300, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2837.163896][T31461] ERROR: Out of memory at tomoyo_realpath_from_path. 22:23:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b61, 0x0) 22:23:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x700, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:25 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/39) 22:23:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) 22:23:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b62, 0x0) [ 2837.502987][T31694] FAULT_INJECTION: forcing a failure. [ 2837.502987][T31694] name failslab, interval 1, probability 0, space 0, times 0 22:23:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xa00, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x7, 0x4, 0x8, 0x8001, 0x80, 0xffffffffffffffff, 0x81, 0xffffffffffffff80, 0x3}}, 0x43) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$KDDISABIO(r2, 0x4b37) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000100000000000003200002060006400004000006000640000300000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.current\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe8, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000d4}, 0x10040045) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0xe, 0x1, 0xfe3}, &(0x7f0000000740)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r5, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f00000006c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000880)=0xc) r8 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r8, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000700)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000005c0)=@raw=[@exit, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffff8ec}, @alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x8, 0x8}, @jmp={0x5, 0x1, 0x6, 0x9, 0xb, 0x30, 0x4}, @alu={0x4, 0x0, 0x7, 0x8, 0x7, 0x40, 0x10}, @map={0x18, 0x3}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x77, &(0x7f0000000380)=""/119, 0x41100, 0x2, [], r7, 0xc, r1, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0xfffffff9, 0x3}, 0x10, r5}, 0x78) tee(r9, r0, 0x7, 0x8) 22:23:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 22:23:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000000)={0xedd, 0x4, 0x400}) setuid(r2) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x0) [ 2837.692017][T31807] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xe00, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2837.856783][T31694] CPU: 1 PID: 31694 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 2837.865170][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.875238][T31694] Call Trace: [ 2837.878680][T31694] dump_stack+0x197/0x210 [ 2837.883285][T31694] should_fail.cold+0xa/0x15 [ 2837.887917][T31694] ? fault_create_debugfs_attr+0x180/0x180 [ 2837.893889][T31694] ? ___might_sleep+0x163/0x2c0 [ 2837.898786][T31694] __should_failslab+0x121/0x190 [ 2837.903765][T31694] should_failslab+0x9/0x14 [ 2837.908299][T31694] kmem_cache_alloc+0x2aa/0x710 [ 2837.913339][T31694] ? __might_sleep+0x95/0x190 [ 2837.918224][T31694] ? __kernel_text_address+0xd/0x40 [ 2837.923458][T31694] __anon_vma_prepare+0x62/0x3c0 [ 2837.928431][T31694] do_huge_pmd_anonymous_page+0x132f/0x1a50 [ 2837.934475][T31694] ? mark_lock+0xc2/0x1220 [ 2837.938963][T31694] ? prep_transhuge_page+0xa0/0xa0 [ 2837.944103][T31694] ? pmd_val+0x100/0x100 [ 2837.948387][T31694] __handle_mm_fault+0x3145/0x3cc0 22:23:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b64, 0x0) [ 2837.953539][T31694] ? apply_to_existing_page_range+0x50/0x50 [ 2837.959579][T31694] ? handle_mm_fault+0x292/0xa50 [ 2837.964681][T31694] ? handle_mm_fault+0x7a0/0xa50 [ 2837.969645][T31694] ? __kasan_check_read+0x11/0x20 [ 2837.974707][T31694] handle_mm_fault+0x3b2/0xa50 [ 2837.979666][T31694] do_page_fault+0x545/0x12e1 [ 2837.984387][T31694] page_fault+0x39/0x40 [ 2837.988573][T31694] RIP: 0010:__put_user_4+0x1c/0x30 22:23:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf00, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2837.993737][T31694] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1e 02 00 48 8b 9b d0 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 2838.013494][T31694] RSP: 0018:ffffc9000655fb48 EFLAGS: 00010297 [ 2838.019732][T31694] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000300 [ 2838.027725][T31694] RDX: 0000000000008106 RSI: ffffffff81a2a5e1 RDI: 0000000000000286 [ 2838.035850][T31694] RBP: ffffc9000655fba0 R08: 0000000000000001 R09: ffff8880516caa90 [ 2838.043844][T31694] R10: fffffbfff15480d0 R11: ffffffff8aa40687 R12: ffffffff8a138c40 [ 2838.051835][T31694] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 2838.059988][T31694] ? __might_fault+0x1a1/0x1e0 [ 2838.064986][T31694] ? vt_do_diacrit+0x5d7/0xa10 [ 2838.069901][T31694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2838.076327][T31694] vt_ioctl+0x459/0x26d0 [ 2838.080609][T31694] ? complete_change_console+0x3a0/0x3a0 [ 2838.086291][T31694] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2838.092121][T31694] ? __f_unlock_pos+0x19/0x20 [ 2838.096835][T31694] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2838.103458][T31694] ? tty_jobctrl_ioctl+0x50/0xd40 [ 2838.108860][T31694] ? complete_change_console+0x3a0/0x3a0 [ 2838.114542][T31694] tty_ioctl+0xa37/0x14f0 [ 2838.118908][T31694] ? tty_vhangup+0x30/0x30 [ 2838.123350][T31694] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2838.129915][T31694] ? do_vfs_ioctl+0x11b/0x1340 [ 2838.134723][T31694] ? ioctl_file_clone+0x180/0x180 [ 2838.139991][T31694] ? __fget_files+0x359/0x520 [ 2838.144886][T31694] ? ksys_dup3+0x3e0/0x3e0 [ 2838.149351][T31694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2838.155619][T31694] ? fput_many+0x12c/0x1a0 [ 2838.160072][T31694] ? tomoyo_file_ioctl+0x23/0x30 [ 2838.165205][T31694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2838.171473][T31694] ? security_file_ioctl+0x8d/0xc0 [ 2838.176924][T31694] ? tty_vhangup+0x30/0x30 [ 2838.181375][T31694] ksys_ioctl+0x123/0x180 [ 2838.185740][T31694] __x64_sys_ioctl+0x73/0xb0 [ 2838.190550][T31694] do_syscall_64+0xfa/0x790 [ 2838.195086][T31694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2838.201356][T31694] RIP: 0033:0x45b399 [ 2838.205277][T31694] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2838.225454][T31694] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2838.233897][T31694] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 [ 2838.241894][T31694] RDX: 0000000020000300 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2838.250058][T31694] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2838.258224][T31694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2838.266221][T31694] R13: 0000000000000325 R14: 00000000004c43fe R15: 0000000000000003 22:23:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 22:23:26 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x6fa, 0x0, [], {0x0, @reserved}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r2 = semget(0x1, 0x4, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r5, 0x3}, 0x10) fdatasync(r4) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r2, 0x6, 0x14, &(0x7f0000000380)=""/4096) 22:23:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b65, 0x0) 22:23:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x3063, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x4000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b66, 0x0) [ 2838.448413][T32003] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0x9, 0x8, 0x7, 0x3f, 0x3, 0x3e, 0x3f, 0x3e, 0x40, 0x7, 0x1, 0x9, 0x38, 0x2, 0xd9, 0x4, 0x3}, [{0x60000000, 0x5, 0x0, 0xffffffffffff0a83, 0x6, 0x400, 0x7}], "add9a7b2e52e38b40f43b3d85eeaaccdb4db3cbf86ef7369dd9544dd125cf2d4657766a8c5f3aeb9e5e6ea3b3232cbb9f2530aea8f8b75b15a7ee386f004a1c7e892bb2e4d2f5f685b07805a151fa2ea2c6d74769555d22edb531a2623c6c51e0d4e6a85fde08b1d346c390e218d442f75da04da05129588e784625444d440a1e063a8c3fa49e4e682331e0c7d1351e531429b928c", [[], [], [], [], [], [], [], []]}, 0x90d) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0xfcf, 0xff01}, &(0x7f00000004c0)=0x8) syz_genetlink_get_family_id$net_dm(&(0x7f0000000f40)='NET_DM\x00') sendmsg$inet_sctp(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="29ff12ddd024f20e50f2fc0b4f84b058285a1d31068b5b047864af35bdce660af2c77001903ba6e97596825dc814cc79b3d5348be5688aeedbee1d6c5ea5814505cbe279edec391d04f8b79340ffb5c0b20617ce556e3bd0bb17a1534d002eee13090eb3a2812b0aec91c32a2f5790bb42a53eef2f4e80c23764550ae9e86ea7bb226bd24f659ed0c74126b24793ba694686354d09a0d11e74dba0e29d49108c77236ddad1a73685b2b17ca72bef6fcb438471231eba58", 0xb7}, {&(0x7f0000000240)="5d71047f6965d78a1e26e3ba9edd669f833c50bd091293a3b94d9ea53060103aadf4a155d4259b52ff38dccca81fc283043ca76a776caf3776b735e80461c365bf31ac2cfb76b7c4f9775ecdf0be6f814db0a980db98e0bc721a19c8a443e1c1b868de720ec1c1f99e", 0x69}, {&(0x7f00000002c0)="96c12392792c0936cfaa77a217efaee231cbdf0db35c891a2768d174263f33d88236f97eff02e315022d0dc500b72d5bf83ec5083f5998d640549fdbeedffe3d82f84c11e6179f456ce3283cbe78879828c8581f964db9775ff40fb4a2732211bfc54bf87ea0ca5794407fcf568ec001c12754e59e3af41c81e76a2539e80841cadf448738aab4720a72b3a833854333de0ebf8064fb417e6b4aba8ecfc012150fa06f6702d14f754ccec2abe1c0c349b288384979147bff415b011a2f63ddded08fe8d757ad5d258e307c67bf4aa63ab5c6022c2a06bf0c", 0xd8}, {&(0x7f00000003c0)="f4bd0b15bc1a1a88abce354d71327b8c7428d7488aa6febaf2925a6787fdafcbe390c3b9716d10edfed77540c5c29b8361ac82a41dbc26deb2f8aa107c6b860af58cf7e435422dacb2a174300fb7621450e86555d37ab95a73aa53b7e5cd2c2c1fa3d0dc1f694831c1148edd482e69afbc0cf46b5a42fb5dfb46a4e6054f5eaa983d4fb32d819d5fdb7d5e", 0x8b}], 0x4, &(0x7f0000000500)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x101, 0x4, 0x7de}}, @authinfo={0x18, 0x84, 0x6, {0x5051}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8204, 0x0, 0x800, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x88, 0x40890}, 0x20000804) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10001) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xffffffff, 0x1, 0x3}) ioctl$GIO_SCRNMAP(r5, 0x4b4a, &(0x7f00000000c0)=""/184) 22:23:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x6000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x2, &(0x7f0000000300)=""/178) 22:23:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b67, 0x0) 22:23:26 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x101040) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fadvise64(r1, 0x4, 0x9, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000100), 0x800) 22:23:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x10, &(0x7f0000000300)=""/178) 22:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 22:23:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x6330, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b68, 0x0) 22:23:27 executing program 5: memfd_create(&(0x7f0000000040)='\x00', 0x5) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b2f, &(0x7f0000000300)=""/178) 22:23:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b30, &(0x7f0000000300)=""/178) [ 2839.452714][T32482] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b69, 0x0) 22:23:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:27 executing program 4: r0 = socket(0x1f, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x2}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r2, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:27 executing program 5: r0 = socket$kcm(0x10, 0xa, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108040f80ecdb4cb9c00a48d41602000000e8bd6efbb60309000e001b00400000ff050005bf0086b56c0845c00f56bda1811396ad606cd4c98174a4f4ecf05fbef300975ba4114645030300125264d62407809db3c7951d54d8ee459260f4c51198030e70b0f84ba6dc3d6fd1c170b8341f45", 0x79}], 0x1}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x3f, 0x8000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000040)={0x2, 0xa8, &(0x7f0000000140)=""/168}) 22:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) 22:23:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b31, &(0x7f0000000300)=""/178) 22:23:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b6a, 0x0) 22:23:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x34000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b32, &(0x7f0000000300)=""/178) 22:23:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000000)=0xfffffffffffffd15) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x280, 0x0) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x81, 0x9, 0x7f, 0x8, 0x3, 0x3e, 0x5, 0x342, 0x38, 0xd2, 0x25, 0x7, 0x20, 0x2, 0x1, 0x63c, 0x1f}, [{0x1, 0x1f, 0x800, 0x7, 0x81, 0x200, 0x1f, 0x5}], "b0366821a34855b7e9b5eeb113e1c00fa18264d8d0c2600b57af4dd04258fd863e01438715edcf822fe04528b6c0244a52994b176e975a2b884edae84a3098ae704b943f0ca3270bb3f9e8595125d08e196e51efadda7741af535a4070d31d52ebcc4a957b36281c6c1576e7e8ad330246e57305a187126dc6c61e3bdc0fea0865e77ee40f50cc77bbb645bc68ca8bf9d087904b20c983ee0839f332a463752c5e01978430e7e6925ff8aeda2602826810ddbec4f7afde3b99c3572c59c869fdb93602ef9a10caa5e89fd4342d", [[], [], [], [], [], [], [], [], [], []]}, 0xb25) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 22:23:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x400300, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b6b, 0x0) 22:23:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x2040) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b33, &(0x7f0000000300)=""/178) 22:23:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x64000, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x1ff, 0x4]}, &(0x7f0000000080)=0x8) [ 2840.410618][ T543] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b6c, 0x0) 22:23:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b34, &(0x7f0000000300)=""/178) 22:23:28 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="000029bd7000fbdbdf25100000001c000380080003000200000008000300ff0300000800020008000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002400)={{0x2, 0x0, 0x80, {0x1, 0x2, 0x1}}, "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", "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"}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000780)={0x2, 0x0, [{}, {}]}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x1000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b6d, 0x0) [ 2840.836788][ T836] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001]}) 22:23:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b35, &(0x7f0000000300)=""/178) 22:23:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000000)) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b70, 0x0) 22:23:29 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x2, 0x5, 0x1f, 0x10000, 0x7, 0x800, 0x7, 0x3, 0x8}) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fff, 0x141000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x5, 0x6, 0x2, 0x3ff, 0xfffffffd, 0x10001, 0x6}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b36, &(0x7f0000000300)=""/178) 22:23:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x3000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b71, 0x0) 22:23:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 2841.251697][ T1038] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:29 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b37, &(0x7f0000000300)=""/178) 22:23:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b72, 0x0) 22:23:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x4000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 22:23:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3a, &(0x7f0000000300)=""/178) 22:23:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4bfa, 0x0) [ 2841.732171][ T1259] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x7000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) 22:23:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 22:23:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3b, &(0x7f0000000300)=""/178) 22:23:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ce88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050008004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r9, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r10 = openat$cgroup_ro(r9, &(0x7f0000001540)='pids.current\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r11, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) r14 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r14, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000001600)={0x1, 0x2, 0x4, 0x8, 0xe4dd, {r12, r13/1000+10000}, {0x4, 0x8, 0x7f, 0x80, 0x6, 0x4, "8a74ad3d"}, 0x10000, 0x4, @planes=&(0x7f00000015c0)={0x8, 0x1f, @fd=r14, 0x73eb}, 0x81, 0x0, 0xffffffffffffffff}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r21, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r21, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4c, 0x2, [@TCA_ROUTE4_ACT={0x48, 0x6, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000019c0)={'macvlan1\x00', r21}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001ac0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x58, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r22}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x40800) process_vm_readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)=""/122, 0x7a}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000100)=""/206, 0xce}], 0x3, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, 0x0) [ 2842.071972][ T1406] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xa000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4bfb, 0x0) 22:23:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3c, &(0x7f0000000300)=""/178) 22:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 2842.294779][ T1406] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xe000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xd, "fc4df06f6886d88e94220aab43"}, &(0x7f00000000c0)=0x15) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xff}, &(0x7f0000000140)=0x8) 22:23:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4c01, 0x0) 22:23:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x8, 0x6, 0x53, 0x1, 0x0, 0x8}) 22:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 22:23:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b3d, &(0x7f0000000300)=""/178) 22:23:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2842.653528][ T1704] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5409, 0x0) 22:23:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/178) 22:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 22:23:30 executing program 5: time(&(0x7f0000000040)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="329ac7965bd976397596fc0dd3fe58c6adf8765224d8e16529ce0de16ac956d9652fcdf7cdf63803d4b8a0f3aa51e8e4dfee878c7163571a62c0e1d2057b5e3152c7e2bec6c74a200ed5aaebb7ce21b5939cf411c17c5b9b882958bf767e72bff891b2ed53ff4d56b5018173bbc11bd4e872085e9ff39f0d7c09c26d14958b95450775081c3e89439255dafd535f769f970baf9ec2682312253b4d4798ae4485b54b8095506e1d034306c8d978e36379", 0xb0}, {&(0x7f0000000200)="1fb24b46347583add76ee6188638c1bddfbe7e25b0cabe48ddaf62adc95b14d9606f2734", 0x24}], 0x3}, 0x0) 22:23:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x30630000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:30 executing program 4: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x4, 0x4, 0x5}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x14, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r5, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r6, 0x19f6, 0x1, 0x9, 0x2, 0x1}, 0x14) 22:23:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540b, 0x0) 22:23:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x40000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000300)=""/178) 22:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 22:23:31 executing program 5: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x2}}, 0x0, 0x9, 0xfff, 0x8, 0x4}, &(0x7f0000000240)=0x98) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x400, 0x6}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r0, 0x4fa0, 0x8, 0x2, 0x0, 0x18bb, 0x63, 0x0, {r2, @in6={{0xa, 0x4e20, 0x10f, @dev={0xfe, 0x80, [], 0x39}, 0x8}}, 0x7ff, 0x9833, 0xffffffff, 0x1}}, &(0x7f0000000440)=0xb0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x3e, 0x40, 0xb}) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2f00000011008108040f80ecdb4cb9c00a48d40d1200000001006efbb6030dc178005b00401000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540c, 0x0) 22:23:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x60000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b44, &(0x7f0000000300)=""/178) 22:23:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0xb2, 0xa, 0x4, 0x4000, 0x39, {r1, r2/1000+30000}, {0x3, 0x8, 0x3f, 0x1, 0x63, 0x37, "e9308772"}, 0x1, 0x4, @fd, 0x8, 0x0, r3}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x80000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file0\x00', r6) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x8000, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x14, &(0x7f0000000080)={r10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={r10, @in={{0x2, 0x4e24, @remote}}, 0x8a, 0xfffffe01, 0x7, 0x9, 0x1}, &(0x7f0000000600)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000640)={r11, 0x9db}, 0x8) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000003c0)={0x1, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x33c5f793}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x36}, 0x1}}}, 0x108) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="100700000005010300000000000000000a0000075402010000000000c401000008f70500ff00110073797a300000000000000000000000000000000000000000000000000000000088a99efaee77094e4e7cd9008582b56b607c7166c439abb7f82404b56ce4dc8a7496a3c0f324df430bb6d1a5adf8435fe154b9f876d271a32b777f36560b1352be06200000000000ffff0000090000080300000005000000090001040200000000010000050006000100000095cd0000810002000200000080000000ff7fff0302000000fbffffff00000000000000000300000000501f00030000000080000000fe080003000000020000000700020002000000000100000101040001000000010000800500074003000000de0200000100030000000000000000800900030002000000060000005400a500010000002400000001000900020000000001000006000400030000000700000080005307010000000000000002180500000000008fa000000400020001000000010000000900004803000000080000000200000103000000030000000300ff030100000004000000070007000100000001ffffff8601040003000000c1ffffbffaff060003000000090000000200000001000000e500000000028000000000000104000000040200000000000080000007001f000200000002000000e5042000020000001f000000dd600200000000000800000068a0040001000000001000000000281502000000010000000300000002000000040000000900efcb02000000090000000104320c03000000dad7000001010001010000000e0a00000100018003000000f7ffffff0000070003000000060000005402010002000000040000005a8109000300020073797a3000000000000000000000000000000000000000000000000000000000babca0359e45dd37a1ebafa27060646723cfab2e2211abb6e834d82c57b0958ebc374821782eaa5b10daf7f13231d06126d594e74066fd43d4ff41ac2878c516ffff020002000000060000003f0046000100000008000000000080000200000000000000008009000300000002000000030003000000000002000000ff0f00000100000006000000ff7f932b01000000740300009903ff570200000001000000030032c000000000800000000600000000000000000000000200070001000000800000003f0001000300000008000000018003000100000000000080dfb5e1ff02000000310600000400030001000049ff7f00000100000401000000020000000600060003000000060000000180020003000000010100000000f7ff03000000050000000000556e0300000000080000fdffff0103000000080000007f00000101000000010000000900a13c020000000104000000080000030000000900000008002b0000000000030000000200000002000000000000000700008000000000018000000200fbff01000000ab3900000001010100000000f60fe22f05003f000300000081000000c00001000100000001000000050001fe020000000100000000080900030000002000000001000001010000000200000001003f00070000003f0000007f00050000000000bc000000233fffff0300000001010000040000000000000007000000ff7f0100030000000900000000807a0801000000492900005402010003000000a50000000907ffff0000000073797a310000000000000000000000000000000000000000000000000000000088219f041fc8d3f651774024da3475a8400c277d27c3ecac62d6bbe340cc4f904db6b15a8fb70e879666275b5c4e35ea3d5352ac6211d076eda9bfa4d77846ff00808e0002000000000000000002090000000000640500000500ff0302000000000000808000ff0f03000000050000000100060003000000fa00000001fc010102000000050000000600060001000000070000006800bc630300000008000000000007000000000008000000400006000074eb00ffffff7f0400bb0000000000030000000700018001000000090000000200010003000000001000000100ea0000000000010000000200000203000000ffffff7f01006d0f000000000000000000000200020000005552000000100900010000000200000000083f000100000006000000ffff0300030000004000000004007f000300000067ec00000800020003000000060000000500faff000000800001000004000400000000000300000001d8e80f03000000010000000200070001000000ff0700001f00ff0003000000fbffffff070004000000000004000000400002000200284ea2160dbea6d63cd74835030000ffffff7f04000700020000007f0000001f00ff0300000000000001000900665d000000000000240009000600010000000600000020006c4d02000000040000004700f9ff0300000009000000520dc1ff0100000040000000000001000300000040000000010005000200000099060000ef00000101000000a04e0046ab5e7275f74eec8e13e48beebb9185c74b0e858df5238d658b5cef8adf022d1527928a9cb4aa4fa031a64a9a757e68311c75fd02599949610195a576bce7efbca09f63793f93fa7c53ff4d5ba1166304eb8f21a9d4713f2372e6cbc5f98c7338ce4444e93d0ebd27ba862b17c6450acef52e145690b0c1a05a703942a2ca8f718b1047ed1d7ea718f19038430cc2151b088741a2c855cad1b14f5b1817f22c09d59fb321ec8ec28dfd6889cc78af9e33ca14ebc158bf7eb4fa73edbab9ad84f2bed89839deef8743ae"], 0x710}, 0x1, 0x0, 0x0, 0x8045}, 0x800) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}) 22:23:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x9effffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000300)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_open_dev$vcsu(&(0x7f00000004c0)='/dev/vcsu#\x00', 0x100000000000003d, 0x400000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x3b) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x408800, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r6, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000400)={0x5, 0xa, 0x4, 0x1000, 0x6, {r7, r8/1000+10000}, {0x3, 0x1, 0x9, 0x1, 0x80, 0x5, "6c997ad3"}, 0x5, 0x2, @planes=&(0x7f00000003c0)={0xf3c3, 0x7f, @userptr=0x6, 0x8}, 0x9, 0x0, 0xffffffffffffffff}) fchmodat(r9, &(0x7f0000000480)='./file0\x00', 0x82) getpid() ioctl$TIOCSTI(r5, 0x5412, 0x1000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="befd26bd7000fedbdf25020000001800038014000600fedf51854e000000000000000000001b500003801400020076657468305f766c616e000000000000000000bb050008006000000014000600000000000000000000000000000000010600040080000000"], 0x7c}, 0x1, 0x0, 0x0, 0x30044810}, 0x40000010) 22:23:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540d, 0x0) 22:23:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000300)=""/178) [ 2843.975795][ T2403] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000180)=""/181) 22:23:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000300)=""/178) 22:23:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 22:23:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, 0x3}, @l2={0x1f, 0x0, @fixed={[], 0x12}, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x3}}, 0x1, 0x0, 0x0, 0x0, 0xa3ef, &(0x7f00000000c0)='ipvlan1\x00', 0x4, 0x40f7, 0x6}) 22:23:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf5ffffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540e, 0x0) [ 2844.404661][ T2743] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b47, &(0x7f0000000300)=""/178) 22:23:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xfcffffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x200, 0x4, {0x0}, {0xffffffffffffffff}, 0x4, 0x9a1f}) tgkill(0x0, r1, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000000c0)={0x0, "cae5c0be0e922adbbeb8a927089f47db20149e9909d1d689e9ae55fc80362ae9", 0x2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r3, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r4, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r5 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x58a80, 0x1) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:23:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540f, 0x0) 22:23:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b48, &(0x7f0000000300)=""/178) 22:23:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xfffff000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2844.818106][ T2947] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5410, 0x0) 22:23:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 22:23:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000300)=""/178) 22:23:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xffffff7f, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x420143, 0x20) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040), 0x0, 0x80000, r2, r0}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x8}) 22:23:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x6}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) 22:23:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5411, 0x0) [ 2845.222790][ T3179] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5412, 0x0) 22:23:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xffffff9e, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4b, &(0x7f0000000300)=""/178) 22:23:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x882, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x2c}, {0x3, 0x0, 0x3f, 0x7fff, 0x435, 0x0, 0x7, 0x5}, {0x5, 0x117, 0x4, 0xff3d}, 0xff, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d2, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3501, 0x0, 0x2, 0x1f, 0x4, 0x3d, 0x3}}, 0xe8) 22:23:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x1c}}, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xfffffff0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2845.645191][ T3401] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 22:23:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5413, 0x0) 22:23:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4c, &(0x7f0000000300)=""/178) 22:23:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xfffffff5, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000300)=""/178) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 22:23:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xfffffffc, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4d, &(0x7f0000000300)=""/178) 22:23:33 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000000000003, 0x2e0081) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, &(0x7f0000000200)=0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x0) keyctl$reject(0x13, r6, 0x3ff, 0xff, r7) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000003180f370223d6ad5bba646758b51fae9be85e2280eb2dade989932df70117e861db939b1d4dc672786ed2057814196c6fa660b0758b3e5194bc5335a0219e379b05aee150a693e2610c8a9dc28c6fd2dc9f327472bb4d85a7137f7f799f1914294de2712e18e67b75dfe78a0ca0e98295f02d80cf6c1e80e1034c091e877652ef3c90d78e44e2ec83bf71d7ecafb41374d3f5d2a83540e5f5a3072114afb3422"], 0x48}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[], @ANYRES32=r9, @ANYRESOCT=r10], 0x3}}, 0x0) r11 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) readv(r12, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x2f1) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x801, 0x0) ioctl$KVM_GET_XCRS(r13, 0x8188aea6, &(0x7f0000000580)={0x3, 0x8, [{0x2, 0x0, 0x3}, {0xcf, 0x0, 0xfffffffffffffffb}, {0xc82, 0x0, 0xb4}]}) 22:23:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5414, 0x0) 22:23:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xffffffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 22:23:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b4e, &(0x7f0000000300)=""/178) 22:23:34 executing program 4: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f0000000300)=""/178) 22:23:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5415, 0x0) 22:23:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b26dad4b14a7033a505d9c138c3d8a2b800400000ff050005bf0086", 0x3e}], 0x1}, 0x0) 22:23:34 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b4a, &(0x7f00000000c0)=""/182) 22:23:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000300)=""/178) 22:23:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5416, 0x0) 22:23:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:34 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r0}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r5, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000003c0)={0x8, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)={0xc808, 0x2, 0x4, 0x4000000, 0x4, {r3, r4/1000+30000}, {0x3, 0x8, 0x7, 0x9, 0x7f, 0x0, "2692b9f3"}, 0x20, 0x2, @planes=&(0x7f0000000180)={0x40, 0x9, @fd, 0x400}, 0x2, 0x0, r1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r8, &(0x7f0000000300)={0x4dc0080c0c0702a1, 0x15, 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r10, @ANYBLOB="2b0f00000000000000001100000008001a01000000009eaa73b7ff26af7754b6a32e75ca88c0bdf9fd38da5bdf53f2f751de32bfd1be2a3ce1e58909133eee5053f9ac744079ddee9da31b97fe2e29dabc79"], 0x2}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000100"/14], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40804) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000011008108040f80ecdb4cb9c00a48d40d02000000e8bd6efbb60309000e001b00400000ff050005bf0086", 0x2e}], 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a3000000000040004800900030073797a30000000000800054000000000140000000b0a0000000000000000000000000000140000001100010000000000000000000000000a535536bd9d1aa850f15c7b5311e7d66c11a2977bc300ec55c66f0f5e4a34cb0f5ba1b5be40dbfbc49d7c0bc6d5872b052c10aee4b2eb323ad49030b482e9a0aa7c995db0d1579dbec889c94f8bd1f2cd5afb409317b399e8038f03ab89e252c97de612773cdba89b1ae8c567de213a3c133b628b59b3dfd3496482be2329849d9b25fc51b6204b1ee2c24f58c2fc768d1ec741a5b9099c4d04126883ba4fb76c2f33e5986c7864f402c02d9c29eca35b2c529249d1593bf3d89f25c732"], 0x94}}, 0x0) r13 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r11, 0x8901, &(0x7f0000000100)=r13) 22:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x0, "e879a019ed7b2e1d7b69005634089d8da52a09cf50ef240b37c1aa66764675de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, [0x6, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 22:23:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) 22:23:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5418, 0x0) 22:23:34 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x22083) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x7, 0xc0, 0x20, 0x4}, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0xe27e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b4a, &(0x7f0000000300)=""/163) 22:23:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b60, &(0x7f0000000300)=""/178) [ 2846.969126][ T4127] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 22:23:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 2847.173033][ T4230] ================================================================== [ 2847.173290][ T4230] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 2847.173305][ T4230] Read of size 32 at addr ffffffff88941580 by task syz-executor.1/4230 [ 2847.173309][ T4230] [ 2847.173326][ T4230] CPU: 1 PID: 4230 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 2847.173335][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.173341][ T4230] Call Trace: [ 2847.173362][ T4230] dump_stack+0x197/0x210 [ 2847.173381][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.173412][ T4230] print_address_description.constprop.0.cold+0x5/0x30b [ 2847.173428][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.173445][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.173463][ T4230] __kasan_report.cold+0x1b/0x32 [ 2847.173485][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.173507][ T4230] kasan_report+0x12/0x20 [ 2847.173525][ T4230] check_memory_region+0x134/0x1a0 [ 2847.173543][ T4230] memcpy+0x24/0x50 [ 2847.173565][ T4230] fbcon_get_font+0x2b2/0x5e0 [ 2847.173589][ T4230] ? display_to_var+0x7e0/0x7e0 [ 2847.173635][ T4230] con_font_op+0x20b/0x1270 [ 2847.173658][ T4230] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2847.173681][ T4230] ? con_write+0xd0/0xd0 [ 2847.173697][ T4230] ? cap_capable+0x205/0x270 [ 2847.173725][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.173744][ T4230] ? security_capable+0x95/0xc0 [ 2847.173767][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.173782][ T4230] ? ns_capable_common+0x93/0x100 [ 2847.173818][ T4230] vt_ioctl+0xd2e/0x26d0 [ 2847.173838][ T4230] ? complete_change_console+0x3a0/0x3a0 [ 2847.173860][ T4230] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2847.173923][ T4230] ? posix_get_monotonic_timespec+0x75/0x290 [ 2847.173953][ T4230] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2847.173973][ T4230] ? tty_jobctrl_ioctl+0x50/0xd40 [ 2847.173990][ T4230] ? complete_change_console+0x3a0/0x3a0 [ 2847.174009][ T4230] tty_ioctl+0xa37/0x14f0 [ 2847.174027][ T4230] ? tty_vhangup+0x30/0x30 [ 2847.174042][ T4230] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2847.174057][ T4230] ? do_vfs_ioctl+0x11b/0x1340 [ 2847.174080][ T4230] ? ioctl_file_clone+0x180/0x180 [ 2847.174095][ T4230] ? __fget_files+0x359/0x520 [ 2847.174130][ T4230] ? ksys_dup3+0x3e0/0x3e0 [ 2847.174149][ T4230] ? ns_to_kernel_old_timeval+0x100/0x100 [ 2847.174177][ T4230] ? tomoyo_file_ioctl+0x23/0x30 [ 2847.174195][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.174210][ T4230] ? security_file_ioctl+0x8d/0xc0 [ 2847.174225][ T4230] ? tty_vhangup+0x30/0x30 [ 2847.174246][ T4230] ksys_ioctl+0x123/0x180 [ 2847.174269][ T4230] __x64_sys_ioctl+0x73/0xb0 [ 2847.174291][ T4230] do_syscall_64+0xfa/0x790 [ 2847.174314][ T4230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2847.174327][ T4230] RIP: 0033:0x45b399 [ 2847.174344][ T4230] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2847.174353][ T4230] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2847.174368][ T4230] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 [ 2847.174378][ T4230] RDX: 0000000020000300 RSI: 0000000000004b60 RDI: 0000000000000003 [ 2847.174387][ T4230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2847.174396][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2847.174405][ T4230] R13: 0000000000000325 R14: 00000000004c43fe R15: 000000000075bf2c [ 2847.174439][ T4230] [ 2847.174445][ T4230] The buggy address belongs to the variable: [ 2847.174531][ T4230] fontdata_8x16+0x1000/0x1120 [ 2847.174537][ T4230] [ 2847.174541][ T4230] Memory state around the buggy address: [ 2847.174555][ T4230] ffffffff88941480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2847.174567][ T4230] ffffffff88941500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2847.174579][ T4230] >ffffffff88941580: fa fa fa fa 06 fa fa fa fa fa fa fa 05 fa fa fa [ 2847.174586][ T4230] ^ [ 2847.174597][ T4230] ffffffff88941600: fa fa fa fa 06 fa fa fa fa fa fa fa 00 00 03 fa [ 2847.174625][ T4230] ffffffff88941680: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 2847.174630][ T4230] ================================================================== [ 2847.174635][ T4230] Disabling lock debugging due to kernel taint [ 2847.193133][ T4230] Kernel panic - not syncing: panic_on_warn set ... [ 2847.193154][ T4230] CPU: 1 PID: 4230 Comm: syz-executor.1 Tainted: G B 5.5.0-syzkaller #0 [ 2847.193163][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.193167][ T4230] Call Trace: [ 2847.193189][ T4230] dump_stack+0x197/0x210 [ 2847.193208][ T4230] panic+0x2e3/0x75c [ 2847.193223][ T4230] ? add_taint.cold+0x16/0x16 [ 2847.193241][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.193260][ T4230] ? preempt_schedule+0x4b/0x60 [ 2847.193276][ T4230] ? ___preempt_schedule+0x16/0x18 [ 2847.193294][ T4230] ? trace_hardirqs_on+0x5e/0x240 [ 2847.193312][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.193328][ T4230] end_report+0x47/0x4f [ 2847.193342][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.193357][ T4230] __kasan_report.cold+0xe/0x32 [ 2847.193374][ T4230] ? fbcon_get_font+0x2b2/0x5e0 [ 2847.193391][ T4230] kasan_report+0x12/0x20 [ 2847.193406][ T4230] check_memory_region+0x134/0x1a0 [ 2847.193421][ T4230] memcpy+0x24/0x50 [ 2847.193438][ T4230] fbcon_get_font+0x2b2/0x5e0 [ 2847.193457][ T4230] ? display_to_var+0x7e0/0x7e0 [ 2847.193473][ T4230] con_font_op+0x20b/0x1270 [ 2847.193491][ T4230] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 2847.193508][ T4230] ? con_write+0xd0/0xd0 [ 2847.193522][ T4230] ? cap_capable+0x205/0x270 [ 2847.193541][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.193557][ T4230] ? security_capable+0x95/0xc0 [ 2847.193582][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.193598][ T4230] ? ns_capable_common+0x93/0x100 [ 2847.193617][ T4230] vt_ioctl+0xd2e/0x26d0 [ 2847.193635][ T4230] ? complete_change_console+0x3a0/0x3a0 [ 2847.193653][ T4230] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2847.193669][ T4230] ? posix_get_monotonic_timespec+0x75/0x290 [ 2847.193690][ T4230] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2847.193705][ T4230] ? tty_jobctrl_ioctl+0x50/0xd40 [ 2847.193720][ T4230] ? complete_change_console+0x3a0/0x3a0 [ 2847.193736][ T4230] tty_ioctl+0xa37/0x14f0 [ 2847.193752][ T4230] ? tty_vhangup+0x30/0x30 [ 2847.193766][ T4230] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2847.193781][ T4230] ? do_vfs_ioctl+0x11b/0x1340 [ 2847.193798][ T4230] ? ioctl_file_clone+0x180/0x180 [ 2847.193813][ T4230] ? __fget_files+0x359/0x520 [ 2847.193833][ T4230] ? ksys_dup3+0x3e0/0x3e0 [ 2847.193849][ T4230] ? ns_to_kernel_old_timeval+0x100/0x100 [ 2847.193869][ T4230] ? tomoyo_file_ioctl+0x23/0x30 [ 2847.193884][ T4230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.193896][ T4230] ? security_file_ioctl+0x8d/0xc0 [ 2847.193908][ T4230] ? tty_vhangup+0x30/0x30 [ 2847.193923][ T4230] ksys_ioctl+0x123/0x180 [ 2847.193940][ T4230] __x64_sys_ioctl+0x73/0xb0 [ 2847.193958][ T4230] do_syscall_64+0xfa/0x790 [ 2847.193977][ T4230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2847.193988][ T4230] RIP: 0033:0x45b399 [ 2847.194004][ T4230] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2847.194012][ T4230] RSP: 002b:00007f74943a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2847.194027][ T4230] RAX: ffffffffffffffda RBX: 00007f74943aa6d4 RCX: 000000000045b399 [ 2847.194036][ T4230] RDX: 0000000020000300 RSI: 0000000000004b60 RDI: 0000000000000003 [ 2847.194044][ T4230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2847.194052][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2847.194061][ T4230] R13: 0000000000000325 R14: 00000000004c43fe R15: 000000000075bf2c [ 2847.195971][ T4230] Kernel Offset: disabled [ 2847.964025][ T4230] Rebooting in 86400 seconds..