00940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) 23:50:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='autofs\x00', 0x20208a1, &(0x7f0000000140)='\x00') sendmmsg$sock(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2c07f9c1a4efd5051dcf0fc27a51ddab3cb27f18664502260075f8", 0x1b}, {&(0x7f0000000540)="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", 0xfc}], 0x2, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}, {{&(0x7f00000006c0)=@generic={0x11, "8d3632f4f543a746da9e970eee1f4e3fb0efbe6d854c457b867c9cd9162f5ae29694cf4d2ccca681e5e5b7884b9dda2e947a7694ae90d1f0e378c82bb6bd9524dd0b51ed5d6584cf109ee1ded4b43f74bcd43004ac6191a958112c4e076c7554a734b3881ef6cf33a8f4c063da78f74814a8f81966b180ce6a6f28184883"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="b16d0cb759f45bda0ff8c55b84f73894065338508601daa99071fbdc3156a8307cd2c63bbecce1fe9a4c3543f805676c1ee4b2583b97279cbfd78b2285662297e1cb4de95dfd9604fe53d0dcca21a5da6c5ce51a5e69c91cca55dc688b90c13fcc209f56837cfade0e5da6f62dfa1f5466b37998aeb3a8a29eb02458052084e672cd6d36800959a02520fb2258fed51a3b256bd8184cfa79e88a160714d4cc1cc56647f035518c9a6be8d9a9acbf41d081cd4432eb840be62d810799d712e777992905bc2eda05bc05", 0xc9}, {&(0x7f0000000840)="6e948a8ddddfb8b8d9ec6d8c3a21f4d99841846df4df56577a9a5a6dbe77d9b327a8693da473b4c6a240fffc9328b14641deb4d7ccb359d0e6dc2e97c4515886e4327266a1708c5f1201ab1ef60d4225064707eb48faa1386777ed56984695a81898dd89a5bb949928cc6cbf27d35b91b0348beae8d5b96cf5b98df1a6920bc221cf0b4af5cb9199762783db6e217ecc398249ed0e14a2be3ac756ee67b5a0a28a0dc16537cc57f233c088668c4c8c64aab253863bc0626326c34c203d00db90f59fc7250a96e9af1aba35a3dad4bbd36f0b5fb657bad51eab5e3a360dce5d6cf365cc80b79d4d8f4051b2ecf7", 0xed}], 0x2, &(0x7f0000002a00)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x48}}], 0x2, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') write$cgroup_type(r0, &(0x7f0000000ac0), 0xfffffffffffffec5) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x1f, 0xff000000, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1, 0x20, 0x8000, 0x7, 0x36}}) sendmsg$can_bcm(r2, &(0x7f0000000a80)={&(0x7f0000000500)={0x1d, r6}, 0x10, &(0x7f0000000980)={&(0x7f0000000a00)={0x7, 0x800, 0x7f, {0x0, 0x2710}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "86e9887a4031a748"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup3(r5, r2, 0x80000) 23:50:02 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:02 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:02 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) [ 1546.571075][T17019] Cannot find add_set index 0 as target [ 1546.613795][T17019] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1546.644080][T17019] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:02 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) 23:50:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x686903, 0x1a7) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:02 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) [ 1547.491574][T17018] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1547.506519][T17017] Cannot find add_set index 0 as target [ 1547.554711][T17018] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:03 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) 23:50:03 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1548.194189][T17017] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1548.213117][T17017] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1548.244044][T17068] Cannot find add_set index 0 as target [ 1548.618636][T17068] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1548.631827][T17068] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:04 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:04 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x120, 0x0, 0x0) 23:50:04 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x220000) execveat(r2, &(0x7f0000000140)='\x00', &(0x7f0000000540)=[&(0x7f0000000200)='@\x00', &(0x7f0000000240)='threaded\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000480)='*!&%\x8d\x00', &(0x7f0000000580)='threaded\x00', &(0x7f0000000500)='threaded\x00'], &(0x7f0000000640)=[&(0x7f0000000580), &(0x7f00000005c0)='%\x00', &(0x7f0000000600)='threaded\x00'], 0x1000) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:04 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:04 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:04 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1549.505898][T17103] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1549.514878][T17103] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:05 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1549.699081][T17135] Cannot find add_set index 0 as target 23:50:05 executing program 0: bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003bc0)={@loopback, @local, 0x0}, &(0x7f0000003c00)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003cc0)={'gretap0\x00', &(0x7f0000003c40)={'tunl0\x00', 0x0, 0x20, 0x1, 0x4, 0x2, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x68, 0x0, 0x77, 0x4, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x1e, 0x3, [{0x5, 0x8, "df0f0c7f09da"}, {0x1, 0x8, "4fa93e3bd7b8"}, {0x2, 0x8, "2062088cacd1"}]}, @timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0xd, [{@empty, 0x3}, {@broadcast, 0xffffffff}, {@remote, 0x100}, {@private=0xa010102, 0xf06}]}]}}}}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000080), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003d00)={0x1c0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x400c080}, 0x8800) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0), 0xd4ba0ff) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r8, &(0x7f00000002c0)='./file0/file0\x00', r7, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1549.768699][T17107] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1549.782475][T17107] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:05 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1549.945462][T17102] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1549.966251][T17102] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:05 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1550.579402][T17135] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1550.607138][T17135] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:06 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:06 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1550.780632][T17157] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1550.809100][T17157] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1550.988804][T17165] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1551.029469][T17165] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1551.212470][T17198] Cannot find add_set index 0 as target 23:50:07 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:07 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl(0x2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1551.571103][T17192] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1551.909487][T17198] nla_validate_range_unsigned: 1 callbacks suppressed [ 1551.909548][T17198] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 23:50:08 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:08 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1552.613981][T17212] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1552.624363][T17212] __nla_validate_parse: 1 callbacks suppressed [ 1552.624417][T17212] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:08 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1552.827069][T17254] Cannot find add_set index 0 as target [ 1553.021005][T17264] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1553.062195][T17264] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = geteuid() read$FUSE(r0, &(0x7f0000002a00)={0x2020}, 0x2020) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0xee01) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003540)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0xffe0000000000000}, &(0x7f00000001c0)={0x18}, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0x3db, {{0x2, 0x3, 0x1}}}, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x80000001}, &(0x7f0000004a40)=ANY=[@ANYBLOB="1370000000000000ff7f0000000000005e2d00c7883feb369faeac92d38cca9e0429016eaa5eb21465ad36e7a2c973537f72ede16203ea3fa66603a08942b2403835a22418b497b7e183c3fce0edafb8fe1d7d83244be1588cf5e5e373c4d4a275ef076b067cbcd05d29881330a0767ce832236276c2646f639f38c0e566364b7439b271d5ca9738cbc0cd7e199b20c2f1d60ff1f3e8"], &(0x7f0000000600)={0x20, 0x0, 0x1f}, &(0x7f0000002d40)={0x78, 0xffffffffffffffda, 0x9, {0x0, 0x7, 0x0, {0x0, 0x200, 0x3, 0x100000000, 0x5, 0x0, 0x0, 0x7f, 0x1, 0x8000, 0x80}}}, 0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="100000000000000080"], 0x0, &(0x7f0000003440)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x7f, 0x0, {0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x3ff, 0xee01, r5, 0x4, 0x6}}, {0x0, 0x1}}}, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0xee01) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003540)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0xffe0000000000000}, &(0x7f00000001c0)={0x18}, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0x3db, {{0x2, 0x3, 0x1}}}, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x80000001}, &(0x7f0000000580)={0x13, 0x0, 0x7fff, {'^-\x00'}}, &(0x7f0000000600)={0x20, 0x0, 0x1f}, &(0x7f0000002d40)={0x78, 0xffffffffffffffda, 0x9, {0x0, 0x7, 0x0, {0x0, 0x200, 0x3, 0x100000000, 0x5, 0x0, 0x0, 0x7f, 0x1, 0x8000, 0x80}}}, 0x0, &(0x7f0000002f40)={0x10, 0x0, 0x101}, 0x0, &(0x7f0000003440)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x7f, 0x0, {0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x3ff, 0xee01, r8, 0x4, 0x6}}, {0x0, 0x1}}}, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000000900)={&(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x22, 0x1, 0x1020030, 0x0, 0x9, 0x3, 0x5}}, &(0x7f0000000000)={0x18, 0x0, 0x100000001, {0xfffffffffffffffe}}, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x3, {0x8000}}, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x5, {0xffff}}, &(0x7f0000000240)={0x18, 0x0, 0xffffffff, {0x7}}, &(0x7f00000003c0)={0x28, 0x0, 0x7fff, {{0x8f, 0x80, 0x1}}}, &(0x7f0000000480)={0x60, 0x0, 0x8, {{0x3f, 0x80, 0x8, 0x6, 0xad, 0x10001, 0x3}}}, &(0x7f0000000500)={0x18, 0x0, 0x3, {0xf6}}, &(0x7f0000000540)=ANY=[@ANYBLOB="1700002d2123795c00"], &(0x7f0000000580)={0x20, 0xfffffffffffffff5, 0x6}, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x9, 0x27a0571b, 0x0, {0x1, 0x7, 0xa0c, 0x8000, 0x7, 0x401, 0x9, 0x7, 0x91f, 0xc000, 0x2, 0xee00, 0x0, 0xfffffff8, 0x40}}}, &(0x7f0000000640)={0x90, 0x0, 0x263e9b6e, {0x1, 0x1, 0x0, 0x8, 0x4, 0x400, {0x4, 0xffff, 0x1, 0x7, 0x5, 0x5, 0xfffffff9, 0x6, 0x3, 0xa000, 0x2, r2, 0x0, 0x0, 0x1f}}}, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000000000000020000000000000004000000000000000400000000000000090000003500000074687265616465640000000000000000"], &(0x7f0000000740)={0xb0, 0xfffffffffffffffe, 0x300, [{{0x2, 0x2, 0x0, 0x9, 0x9, 0x2, {0x3, 0x9, 0x0, 0x3e, 0x3db3, 0x40, 0x400, 0x8, 0x6, 0x8000, 0x9, r4, r5, 0x4, 0x8}}, {0x2, 0x3, 0x6, 0x5, '\'#]!).'}}]}, &(0x7f0000000800)={0xa0, 0x0, 0x3, {{0x6, 0x3, 0x83b0, 0x101, 0x7, 0x5, {0x6, 0x4, 0x0, 0x1, 0x7239, 0x5, 0x0, 0x8e6d, 0xe53cf15, 0x4000, 0x10000, r7, r8, 0x7, 0x5}}, {0x0, 0x8}}}, &(0x7f00000008c0)={0x20, 0x0, 0x400, {0x5, 0x4, 0x1fd, 0x7ff}}}) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:09 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:09 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1553.632374][T17292] Cannot find add_set index 0 as target 23:50:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000001dc0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000001a00)=""/98, 0x62}, {&(0x7f0000001a80)=""/109, 0x6d}, {&(0x7f0000001b00)=""/88, 0x58}], 0x8, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000001d40)=""/90, 0x5a}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x2002, &(0x7f0000000980)={0x0, 0x989680}) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1553.931768][T17254] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1553.948231][T17254] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1553.978702][T17298] Cannot find add_set index 0 as target [ 1554.004769][T17292] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1554.014785][T17292] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:10 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = geteuid() read$FUSE(r0, &(0x7f0000002a00)={0x2020}, 0x2020) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0xee01) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003540)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0xffe0000000000000}, &(0x7f00000001c0)={0x18}, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0x3db, {{0x2, 0x3, 0x1}}}, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x80000001}, &(0x7f0000004a40)=ANY=[@ANYBLOB="1370000000000000ff7f0000000000005e2d00c7883feb369faeac92d38cca9e0429016eaa5eb21465ad36e7a2c973537f72ede16203ea3fa66603a08942b2403835a22418b497b7e183c3fce0edafb8fe1d7d83244be1588cf5e5e373c4d4a275ef076b067cbcd05d29881330a0767ce832236276c2646f639f38c0e566364b7439b271d5ca9738cbc0cd7e199b20c2f1d60ff1f3e8"], &(0x7f0000000600)={0x20, 0x0, 0x1f}, &(0x7f0000002d40)={0x78, 0xffffffffffffffda, 0x9, {0x0, 0x7, 0x0, {0x0, 0x200, 0x3, 0x100000000, 0x5, 0x0, 0x0, 0x7f, 0x1, 0x8000, 0x80}}}, 0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="100000000000000080"], 0x0, &(0x7f0000003440)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x7f, 0x0, {0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x3ff, 0xee01, r5, 0x4, 0x6}}, {0x0, 0x1}}}, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0xee01) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003540)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0xffe0000000000000}, &(0x7f00000001c0)={0x18}, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0x3db, {{0x2, 0x3, 0x1}}}, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x80000001}, &(0x7f0000000580)={0x13, 0x0, 0x7fff, {'^-\x00'}}, &(0x7f0000000600)={0x20, 0x0, 0x1f}, &(0x7f0000002d40)={0x78, 0xffffffffffffffda, 0x9, {0x0, 0x7, 0x0, {0x0, 0x200, 0x3, 0x100000000, 0x5, 0x0, 0x0, 0x7f, 0x1, 0x8000, 0x80}}}, 0x0, &(0x7f0000002f40)={0x10, 0x0, 0x101}, 0x0, &(0x7f0000003440)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x7f, 0x0, {0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x3ff, 0xee01, r8, 0x4, 0x6}}, {0x0, 0x1}}}, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000000900)={&(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x22, 0x1, 0x1020030, 0x0, 0x9, 0x3, 0x5}}, &(0x7f0000000000)={0x18, 0x0, 0x100000001, {0xfffffffffffffffe}}, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x3, {0x8000}}, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x5, {0xffff}}, &(0x7f0000000240)={0x18, 0x0, 0xffffffff, {0x7}}, &(0x7f00000003c0)={0x28, 0x0, 0x7fff, {{0x8f, 0x80, 0x1}}}, &(0x7f0000000480)={0x60, 0x0, 0x8, {{0x3f, 0x80, 0x8, 0x6, 0xad, 0x10001, 0x3}}}, &(0x7f0000000500)={0x18, 0x0, 0x3, {0xf6}}, &(0x7f0000000540)=ANY=[@ANYBLOB="1700002d2123795c00"], &(0x7f0000000580)={0x20, 0xfffffffffffffff5, 0x6}, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x9, 0x27a0571b, 0x0, {0x1, 0x7, 0xa0c, 0x8000, 0x7, 0x401, 0x9, 0x7, 0x91f, 0xc000, 0x2, 0xee00, 0x0, 0xfffffff8, 0x40}}}, &(0x7f0000000640)={0x90, 0x0, 0x263e9b6e, {0x1, 0x1, 0x0, 0x8, 0x4, 0x400, {0x4, 0xffff, 0x1, 0x7, 0x5, 0x5, 0xfffffff9, 0x6, 0x3, 0xa000, 0x2, r2, 0x0, 0x0, 0x1f}}}, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000000000000020000000000000004000000000000000400000000000000090000003500000074687265616465640000000000000000"], &(0x7f0000000740)={0xb0, 0xfffffffffffffffe, 0x300, [{{0x2, 0x2, 0x0, 0x9, 0x9, 0x2, {0x3, 0x9, 0x0, 0x3e, 0x3db3, 0x40, 0x400, 0x8, 0x6, 0x8000, 0x9, r4, r5, 0x4, 0x8}}, {0x2, 0x3, 0x6, 0x5, '\'#]!).'}}]}, &(0x7f0000000800)={0xa0, 0x0, 0x3, {{0x6, 0x3, 0x83b0, 0x101, 0x7, 0x5, {0x6, 0x4, 0x0, 0x1, 0x7239, 0x5, 0x0, 0x8e6d, 0xe53cf15, 0x4000, 0x10000, r7, r8, 0x7, 0x5}}, {0x0, 0x8}}}, &(0x7f00000008c0)={0x20, 0x0, 0x400, {0x5, 0x4, 0x1fd, 0x7ff}}}) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1554.844386][T17298] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1554.853990][T17298] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:11 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)=0x0) read$FUSE(r0, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$security_capability(r1, &(0x7f00000002c0), &(0x7f0000000480)=@v3={0x3000000, [{0x7, 0x3f}, {0x7, 0x95c3}], r2}, 0x18, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000003c0)={0x7ff, 0x4, {}, {0xffffffffffffffff}, 0x9, 0x7fffffff}) mount$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}], [{@fowner_lt={'fowner<', r4}}, {@subj_user={'subj_user', 0x3d, 'threaded\x00'}}, {@obj_user}, {@obj_user={'obj_user', 0x3d, '}@]@%+]({],\\@\''}}]}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000001c0)='./file0/file1\x00', 0x2) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1555.731102][T17319] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1555.746237][T17319] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:11 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1556.611939][T17368] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1556.622422][T17368] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:12 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="00f02e5ef0647781631f807c660d630bc89948a7f4603ffadc38d06948e136aad07106e125d7dc190b8c4a85fe8cb6338798f225a0bbec9f363233a0891fd05bb1369b52ff5a9650548c4db826038966db1ec6eac54b31bf32f055323355c448800d8225f76d887c690bcd391c3a28447e85f26b34683ec62e15fb838e2be009d17cde239100844348f3f843640d72fe6d0dc3d2c9"], &(0x7f0000000480)=""/166, 0xa6) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000009, 0x40010, r1, 0xf6cbb000) openat(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10b300, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:13 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1557.264048][T17393] Cannot find add_set index 0 as target [ 1557.286524][T17393] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1557.295901][T17393] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:13 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:13 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:13 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1557.653952][T17403] Cannot find add_set index 0 as target 23:50:13 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x1) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) fallocate(r0, 0x10, 0xff, 0x7) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r2 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r2, 0x210d5f27f91d1fe1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) [ 1557.960277][T17404] Cannot find add_set index 0 as target [ 1558.233715][T17399] Cannot find add_set index 0 as target [ 1558.246016][T17403] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1558.246306][T17403] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1558.422427][T17404] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1558.459808][T17404] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:14 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1558.679482][T17439] Cannot find add_set index 0 as target [ 1558.909294][T17439] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1558.922017][T17439] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:14 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1559.457417][T17399] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1559.470277][T17399] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000140)=0x7, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r3, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xa20000, 0x7ff, 0x7, r1, 0x0, &(0x7f00000000c0)={0x9a090c, 0x1, '\x00', @value64=0xb3}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0303ed89ffffedffffff17000000"], 0x14}}, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) renameat2(r8, &(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1559.501124][T17455] Cannot find add_set index 0 as target 23:50:15 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1559.698988][T17471] Cannot find add_set index 0 as target 23:50:16 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1560.291514][T17471] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1560.301434][T17471] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1560.429767][T17485] Cannot find add_set index 0 as target [ 1560.518722][T17455] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1560.537108][T17455] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.684526][T17485] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1560.693584][T17485] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:16 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:16 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, 0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:16 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:16 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) getsockname(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f00000003c0)=0x2) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@deltfilter={0xb4, 0x2d, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xa, 0xfff3}, {0xfff3, 0xfff5}}, [@TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x4, 0x3}}, @TCA_U32_HASH={0x8, 0x2, 0x6000}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1560.873832][T17515] Cannot find add_set index 0 as target 23:50:16 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1561.048756][T17522] Cannot find add_set index 0 as target [ 1561.085138][T17519] Cannot find add_set index 0 as target [ 1561.265808][T17515] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1561.287334][T17515] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:17 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1562.145281][T17517] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1562.160237][T17517] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:18 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1562.216819][T17522] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:18 executing program 0: mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lseek(r1, 0x200, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockname(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000040)=0x80) renameat2(r2, &(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1562.345523][T17519] nla_validate_range_unsigned: 1 callbacks suppressed [ 1562.345543][T17519] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 23:50:18 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1562.452831][T17576] Cannot find add_set index 0 as target [ 1562.498718][T17542] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:50:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x4, 0xa4, 0x3c}) 23:50:18 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1562.845941][T17606] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 23:50:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mkdirat(r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x1a0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:19 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1563.642590][T17593] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1563.656907][T17593] __nla_validate_parse: 3 callbacks suppressed [ 1563.656925][T17593] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1563.769315][T17576] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1563.795579][T17576] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1563.815358][T17641] set_target_v0_checkentry: 2 callbacks suppressed [ 1563.815393][T17641] Cannot find add_set index 0 as target [ 1564.726949][T17641] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1564.736939][T17641] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:20 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, 0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:20 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) statx(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100, 0x601, &(0x7f0000000480)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r8 = syz_open_pts(r3, 0x0) dup3(r8, r2, 0x0) openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0xa0400, 0x190) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:20 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:20 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1565.072908][T17675] Cannot find add_set index 0 as target [ 1565.078603][T17670] Cannot find add_set index 0 as target [ 1565.109700][T17679] Cannot find add_set index 0 as target [ 1565.127827][T17675] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1565.140859][T17675] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:21 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1565.640459][T17688] Cannot find add_set index 0 as target [ 1565.874582][T17679] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1565.883092][T17679] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:21 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, 0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x80, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7fff}, 0x1c) open(&(0x7f0000000000)='./file1\x00', 0x20200, 0x100) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') open(&(0x7f00000000c0)='./file0/file0\x00', 0x103280, 0xb1) [ 1566.016959][T17672] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1566.038279][T17672] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:22 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, 0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1566.283030][T17716] Cannot find add_set index 0 as target 23:50:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x109000, 0x157) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={{0x77359400}}) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1566.374304][T17722] Cannot find add_set index 0 as target [ 1566.514268][T17670] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1566.522467][T17670] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1566.647252][T17688] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1566.810035][T17716] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:22 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:22 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r2, 0x0) r5 = getgid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffc00}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1300}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@appraise_type}]}}) [ 1567.653730][T17722] nla_validate_range_unsigned: 2 callbacks suppressed [ 1567.653750][T17722] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1567.695546][T17722] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1567.733522][T17780] fuse: Bad value for 'max_read' [ 1568.300283][T17762] Cannot find add_set index 0 as target [ 1568.440804][T17765] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:50:24 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rmdir(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') renameat2(r1, &(0x7f00000001c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0xf0, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "f80d922ffdb5dcb381f8dc5d687092aac33e756bc6e77fe97720003158fed52b319bc8cdb4695a4cd3b7e8964be8b05059a93a2759c9d16912b816d4bd2d4362449cdc86bbed17c03ca3662219c44fab700f2481e09dfe3d613f7ca33c9b016849e220f4816b97c190bf83a6416393d46a61cb8a5f93416a9de02915dfea1ed7"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') 23:50:24 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x109000, 0x157) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={{0x77359400}}) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') [ 1568.988578][T17762] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1569.014228][T17762] __nla_validate_parse: 1 callbacks suppressed [ 1569.014246][T17762] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1569.410423][T17810] Cannot find add_set index 0 as target 23:50:25 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1570.108699][T17810] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1570.129404][T17810] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0xa) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') umount2(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6) 23:50:26 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1570.374075][T17826] Cannot find add_set index 0 as target 23:50:26 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1570.875931][T17843] Cannot find add_set index 0 as target [ 1570.930721][T17851] Cannot find add_set index 0 as target [ 1570.959674][T17850] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1570.994100][T17850] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:26 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') creat(&(0x7f0000000000)='./file0/file0\x00', 0x1) [ 1571.650704][T17826] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1571.672879][T17826] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:27 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1571.932581][T17878] Cannot find add_set index 0 as target [ 1572.268848][T17859] Cannot find add_set index 0 as target 23:50:28 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000380)='./file0/file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000000df7d71c58a1b491000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x4000010, r5, 0x0) syz_io_uring_setup(0x4de, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0/file0\x00'}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xfb) ioctl$TCXONC(r5, 0x540a, 0x0) openat(r2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x440000, 0x14) fcntl$setown(r2, 0x8, 0x0) mkdirat(r0, &(0x7f00000002c0)='./file0/file0\x00', 0x133) [ 1572.588652][T17843] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1572.609259][T17843] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1572.638416][T17895] Cannot find add_set index 0 as target [ 1572.784699][T17877] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1572.801885][T17877] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1572.944277][T17859] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1572.952485][T17859] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:28 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1573.043299][T17895] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1573.055353][T17895] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:28 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1573.168580][T17918] Cannot find add_set index 0 as target [ 1573.264689][T17935] Cannot find add_set index 0 as target [ 1573.554864][T17935] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1573.563314][T17935] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1573.900796][T17937] Cannot find add_set index 0 as target 23:50:29 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:29 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:29 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, 0xffffffffffffffff, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1574.054567][T17918] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1574.063130][T17918] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:30 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1574.212693][T17937] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1574.237480][T17937] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:30 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1574.413931][T17984] set_target_v0_checkentry: 2 callbacks suppressed [ 1574.413988][T17984] Cannot find add_set index 0 as target [ 1574.441613][T17970] Cannot find add_set index 0 as target [ 1574.599280][T17989] Cannot find add_set index 0 as target [ 1574.691337][T17965] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 23:50:30 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1574.735057][T17965] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1575.260452][T18009] Cannot find add_set index 0 as target [ 1575.350728][T17970] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1575.364774][T17970] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:31 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1575.445993][T17969] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1575.469647][T17969] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1575.610837][T17984] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1575.625066][T17984] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:31 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1575.683824][T18033] Cannot find add_set index 0 as target 23:50:31 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1575.815208][T17989] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:31 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1575.993278][T18009] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:31 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1576.118882][T18046] Cannot find add_set index 0 as target [ 1576.143058][T18033] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:32 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1576.392525][T18081] Cannot find add_set index 0 as target [ 1576.402802][T18070] Cannot find add_set index 0 as target [ 1576.642441][T18088] Cannot find add_set index 0 as target [ 1576.931092][T18051] Cannot find add_set index 0 as target [ 1577.091141][T18081] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:33 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:33 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1577.811468][T18051] nla_validate_range_unsigned: 6 callbacks suppressed [ 1577.811488][T18051] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 23:50:33 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1578.001686][T18130] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 23:50:34 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1578.463035][T18132] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:50:34 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1578.562110][T18162] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 23:50:34 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:34 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:34 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1579.398549][T18148] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1579.410495][T18148] __nla_validate_parse: 6 callbacks suppressed [ 1579.410513][T18148] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1579.511829][T18185] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1579.527965][T18185] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:35 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1579.912028][T18223] set_target_v0_checkentry: 8 callbacks suppressed [ 1579.912115][T18223] Cannot find add_set index 0 as target [ 1579.988258][T18189] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1580.004560][T18189] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:35 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:35 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1580.148882][T18191] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1580.166843][T18191] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:36 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1580.309484][T18249] Cannot find add_set index 0 as target [ 1580.359130][T18193] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1580.377131][T18193] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:36 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:36 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1580.539461][T18223] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1580.558259][T18223] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1580.939493][T18259] Cannot find add_set index 0 as target [ 1581.075442][T18283] Cannot find add_set index 0 as target [ 1581.177285][T18276] Cannot find add_set index 0 as target [ 1581.182562][T18253] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:37 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1581.245625][T18249] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. 23:50:37 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1581.718782][T18283] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:37 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1581.879585][T18259] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:38 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:38 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1582.418098][T18351] Cannot find add_set index 0 as target 23:50:38 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1582.539954][T18374] Cannot find add_set index 0 as target 23:50:38 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) [ 1582.711573][T18313] Cannot find add_set index 0 as target [ 1582.729831][T18376] Cannot find add_set index 0 as target [ 1582.843610][T18388] Cannot find add_set index 0 as target [ 1582.905465][T18380] nla_validate_range_unsigned: 7 callbacks suppressed [ 1582.905486][T18380] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 23:50:38 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1583.007211][T18374] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 23:50:39 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1583.411998][T18386] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 23:50:39 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1583.722209][T18384] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1583.813407][T18388] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 23:50:39 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:39 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1583.916835][T18412] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:50:39 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1584.248539][T18417] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1584.420801][T18432] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1584.437860][T18432] __nla_validate_parse: 10 callbacks suppressed [ 1584.437912][T18432] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:40 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:40 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1584.654455][T18470] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1584.662648][T18470] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:40 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1584.838417][T18472] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1584.862044][T18472] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'. 23:50:40 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1585.036099][T18522] set_target_v0_checkentry: 5 callbacks suppressed [ 1585.036118][T18522] Cannot find add_set index 0 as target [ 1585.047969][T18487] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. 23:50:41 executing program 1: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) [ 1585.251447][T18500] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1585.298737][T18513] Cannot find add_set index 0 as target 23:50:41 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1585.658670][T18539] Cannot find add_set index 0 as target [ 1585.785081][T18513] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'. 23:50:41 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1585.860446][T18549] Cannot find add_set index 0 as target [ 1586.000587][T18571] Cannot find add_set index 0 as target [ 1586.185879][T18522] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:42 executing program 5: io_setup(0xffff, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time_for_children\x00') [ 1586.319741][T18554] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. 23:50:42 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1586.484995][T18539] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) [ 1586.542433][T18603] Cannot find add_set index 0 as target 23:50:42 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x7, 0x40840) [ 1586.683089][T18571] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) 23:50:42 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4800) 23:50:42 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0x5450, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x74, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4}, [@network_terminal={0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x44}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0xf3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xa7, 0x0, 0x0, 0x10, 0x2}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "fc9a375882452bd6831e246adbafd682"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x0, 0x800}]}, 0x4, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x1c, &(0x7f0000000340)=@string={0x1c, 0x3, "bd806672ab8dd02a410b3d46372e68716aeed573494d71faa42f"}}]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) 23:50:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x54a2, 0x0) 23:50:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x86a82, 0x0) [ 1587.252668][ T5] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1587.502733][ T5] usb 6-1: Using ep0 maxpacket: 32 23:50:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 23:50:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x1}]}}, &(0x7f00000002c0)=""/237, 0x26, 0xed, 0x1}, 0x20) 23:50:43 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1}) 23:50:43 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1587.712996][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 1587.737893][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.811260][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.894520][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1587.937721][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1588.063049][ T5] usb 6-1: language id specifier not provided by device, defaulting to English [ 1588.174301][T18666] Cannot find add_set index 0 as target [ 1588.449921][T18666] nla_validate_range_unsigned: 9 callbacks suppressed [ 1588.449941][T18666] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 23:50:44 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:44 executing program 0: socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) 23:50:44 executing program 4: sendmsg$unix(0xffffffffffffffff, 0x0, 0x803e0000) 23:50:44 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1588.592989][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1588.602067][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.611702][ T5] usb 6-1: SerialNumber: 肽牦趫⫐ୁ䘽⸷煨珕䵉况⾤ [ 1588.673126][T18632] raw-gadget gadget: fail, usb_ep_enable returned -22 23:50:44 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1588.832280][T18707] Cannot find add_set index 0 as target [ 1588.870001][T18701] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1588.941084][ T5] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1588.955404][ T5] usb 6-1: USB disconnect, device number 29 23:50:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 23:50:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x240040d0) 23:50:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000010000000100000018"], 0x18}, 0x0) 23:50:45 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000440), 0x4) 23:50:45 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1589.506749][T18728] Cannot find add_set index 0 as target 23:50:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x37, {@loopback}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) 23:50:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', 0x0}) [ 1589.783412][T18728] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1589.804437][T18728] __nla_validate_parse: 4 callbacks suppressed [ 1589.804455][T18728] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:45 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18, 0x29, 0x4}}], 0x18}, 0x0) 23:50:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x43, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}}, 0x14) 23:50:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)) 23:50:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 23:50:45 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r7, &(0x7f00000003c0)=0xeaa, r4, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1590.126674][T18768] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:50:46 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000540)=""/214, 0xfffffde1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000002c0)) tkill(r0, 0x7) 23:50:46 executing program 1: perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 23:50:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x2a, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 23:50:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') [ 1590.264755][T18773] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1590.286032][T18773] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1590.357016][T18771] Cannot find add_set index 0 as target 23:50:46 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ca, 0x7) 23:50:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) accept4(r0, &(0x7f0000000380), &(0x7f00000000c0)=0x80, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, 0x0, 0x52) pipe2(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x2806, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendfile(r1, r2, &(0x7f0000000200), 0x1000001) [ 1590.596074][T18771] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1590.604787][T18771] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:46 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x1fb80}], 0x1}}], 0x2, 0x24004880) 23:50:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1}) 23:50:46 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), 0x4) [ 1590.903140][ T26] audit: type=1326 audit(1634428246.714:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18820 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e60ca39 code=0x0 23:50:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x16}, [@NDA_LLADDR={0xa, 0x2, @random="7c56e76ec293"}]}, 0x28}}, 0x0) [ 1591.071597][T18836] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1591.094445][T18836] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:47 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) 23:50:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) 23:50:47 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000140)) 23:50:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000)="dafeb00deef8", 0x6}]) 23:50:47 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x1004}}, 0x0) 23:50:47 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:50:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x5000) [ 1591.723047][ T26] audit: type=1326 audit(1634428247.534:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18820 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e60ca39 code=0x0 [ 1591.750144][T18868] Cannot find add_set index 0 as target 23:50:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x303200) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 23:50:47 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 23:50:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) [ 1592.077210][T18868] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1592.102736][T18868] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1592.199719][T18865] Cannot find add_set index 0 as target 23:50:48 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:48 executing program 0: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000001040001f4"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/40, 0x28}], 0x10000000000000a2) 23:50:48 executing program 1: r0 = fork() tgkill(r0, r0, 0x13) [ 1592.508106][T18865] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1592.527206][T18865] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1592.731306][T18916] Cannot find add_set index 0 as target 23:50:48 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:48 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = fork() tgkill(r0, r0, 0x1) waitid(0x0, 0x0, &(0x7f0000000000), 0x4, &(0x7f0000000080)) 23:50:48 executing program 5: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) fork() fork() fork() shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) 23:50:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2a500) 23:50:48 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1592.775805][T18916] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1592.804304][T18916] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:48 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0xfffffffffffffffb}, 0x0, 0x0, 0x0) 23:50:48 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000002780), 0x40201, 0x0) 23:50:48 executing program 0: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:50:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/164, 0xa4}], 0x2) [ 1593.538820][T18931] Cannot find add_set index 0 as target [ 1593.781844][T18931] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1593.790351][T18931] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:49 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:49 executing program 0: r0 = socket(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x891e, &(0x7f0000000780)={'sit0\x00', 0x0}) 23:50:49 executing program 5: r0 = socket(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8918, 0x0) 23:50:49 executing program 1: perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:50:49 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:49 executing program 4: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="aa", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x15, r0) 23:50:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @dev}, 0x80) connect(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @private}, 0x80) 23:50:49 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="aa", 0x1, 0xfffffffffffffffb) keyctl$revoke(0xf, r0) 23:50:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'vlan0\x00', {}, 0x7}) 23:50:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5451, 0x0) [ 1594.185816][T18992] Cannot find add_set index 0 as target 23:50:50 executing program 1: socketpair(0x27, 0x0, 0x0, &(0x7f0000000840)) 23:50:50 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, 0x0}) [ 1594.481238][T18992] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1594.533644][T18992] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1594.542951][T18994] Cannot find add_set index 0 as target [ 1594.931776][T18994] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1594.941473][T18994] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:50 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:50 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) 23:50:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 23:50:50 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, &(0x7f0000000040), 0x4) [ 1595.204885][T19043] Cannot find add_set index 0 as target [ 1595.221089][T19043] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1595.240631][T19043] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:51 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) 23:50:51 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) 23:50:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 23:50:51 executing program 4: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2584f4629b68a23f, 0xffffffffffffffff, 0x0) 23:50:51 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f00000000c0)='./file0/file0\x00'}, 0x10) 23:50:51 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 23:50:51 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1595.810728][T19060] Cannot find add_set index 0 as target [ 1595.954536][T19060] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1595.969547][T19060] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:52 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) 23:50:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x2, 0x4, 0x39362211, 0xfd4}, 0x40) 23:50:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x1}], &(0x7f0000000080)='GPL\x00', 0x3, 0xc4, &(0x7f00000000c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:50:52 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:52 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000004140)=@raw=[@ldst, @exit], &(0x7f00000041c0)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f0000004200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:50:52 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002940)={0xffffffffffffffff}, 0x4) 23:50:52 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000008f00)={0x0, 0x0, 0x0, 0x0}, 0x38) 23:50:52 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1596.394582][T19097] Cannot find add_set index 0 as target 23:50:52 executing program 5: perf_event_open(&(0x7f0000005440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6624d272, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:50:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f000001e600)={0xf, 0x0, 0x0, 0x1}, 0x40) 23:50:52 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/251, 0xfb}], 0x1}, 0x0) [ 1596.633325][T19107] Cannot find add_set index 0 as target [ 1596.726234][T19097] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1596.759834][T19097] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1597.174288][T19107] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1597.186168][T19107] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:53 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:53 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="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", 0xdc9}], 0x2, &(0x7f0000002980)=ANY=[], 0x410}, 0x0) 23:50:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5452, &(0x7f0000001840)) 23:50:53 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000e40)) [ 1597.441359][T19142] Cannot find add_set index 0 as target [ 1597.486440][T19142] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1597.507807][T19142] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:53 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:53 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000600)) 23:50:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x401c5820, 0x0) 23:50:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb020018"], &(0x7f0000000180)=""/171, 0xdc, 0xab, 0x1}, 0x20) 23:50:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001440)=""/165) 23:50:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40086602, &(0x7f00000001c0)=""/4096) 23:50:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) 23:50:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/183) [ 1598.404395][T19166] Cannot find add_set index 0 as target [ 1598.599054][T19166] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1598.607539][T19166] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:54 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:54 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000001cc0)={{0x12, 0x1, 0x0, 0x10, 0x4b, 0x89, 0x20, 0x50d, 0x258a, 0xa6f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xad, 0x0, 0x2, 0x1b, 0x2, 0x2a, 0x0, [@uac_control], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5f}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x84, 0xe1, 0x38, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x20}}]}}]}}]}}, 0x0) 23:50:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044584, &(0x7f00000001c0)=""/4096) 23:50:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file1\x00', 0x10, 0x103) [ 1598.803620][T19193] Cannot find add_set index 0 as target [ 1598.840949][T19193] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1598.860545][T19193] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1599.031722][T25602] usb 2-1: new high-speed USB device number 35 using dummy_hcd 23:50:55 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 23:50:55 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 23:50:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x184640, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x205200, 0x10) [ 1599.271688][T25602] usb 2-1: Using ep0 maxpacket: 32 23:50:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000001c0)='./file1\x00', 0x152) [ 1599.392212][T25602] usb 2-1: config 0 has an invalid interface number: 173 but max is 1 [ 1599.400512][T25602] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 23:50:55 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x5b) 23:50:55 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 1599.501246][T25602] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1599.554180][T25602] usb 2-1: config 0 has no interface number 0 [ 1599.560338][T25602] usb 2-1: config 0 interface 173 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 23:50:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@dev, 0xa}) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5cb3, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x441}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x8]}, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x880c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xd1a6}, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="deff", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}, 0x12100) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x4, 0x3, 0x2, 0x0, 0x8, 0x2000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffff80, 0x0, @perf_config_ext={0x8, 0x231ec891}, 0x80, 0x0, 0x3, 0x7, 0x101, 0x9, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x3, r2, 0x8) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000005c0)="01893f59ea0c7c0958485bb2d7476e22f8dccbfb4b85c223fab8a6866e8cffa06c8ba1f76d0127ffd8e1c6ed6deac84520135f7d2d32bcdc04150d7ee5e17aed", 0x40}, {0x0}, {&(0x7f0000000680)="5c829096477bab2c48585c25575645573351cdcf607c2740a4cc2dd680425f4a7a5799d022f1dbff46f87420fc5dad826d9ba046c661a70395ca98c647016dcad5cf83d29a8498746eff11a97ff3491a5630c080b0c72e0a044fc9bb691c5496ae3941cb563b72438369f8926efc2f637ced53fb1b1c1e287a380f750cfbc4c3fdfc471076b863cc952a04477507c28c9061f61e27666c45d2dddb3a63c5f12db8a46e5e5ba0ab93945aff2a80de", 0xae}], 0x3, 0xffffffff, 0xedda) [ 1599.716625][T19223] Cannot find add_set index 0 as target 23:50:55 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1599.822071][T25602] usb 2-1: New USB device found, idVendor=050d, idProduct=258a, bcdDevice=a6.f4 [ 1599.831155][T25602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.863717][T25602] usb 2-1: Product: syz [ 1599.874815][T25602] usb 2-1: Manufacturer: syz [ 1599.881290][T25602] usb 2-1: SerialNumber: syz [ 1599.904219][T25602] usb 2-1: config 0 descriptor?? [ 1599.913542][T19251] Cannot find add_set index 0 as target [ 1599.949051][T19251] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1599.959570][T25602] plusb: probe of 2-1:0.173 failed with error -22 [ 1599.970162][T19251] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.164831][T25782] usb 2-1: USB disconnect, device number 35 [ 1600.728221][T19223] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1600.752223][T19223] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1600.961580][ T8624] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1601.201537][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1601.321773][ T8624] usb 2-1: config 0 has an invalid interface number: 173 but max is 1 [ 1601.329970][ T8624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.346420][ T8624] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1601.355571][ T8624] usb 2-1: config 0 has no interface number 0 [ 1601.367002][ T8624] usb 2-1: config 0 interface 173 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1601.541587][ T8624] usb 2-1: New USB device found, idVendor=050d, idProduct=258a, bcdDevice=a6.f4 [ 1601.550738][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.559051][ T8624] usb 2-1: Product: syz [ 1601.563446][ T8624] usb 2-1: Manufacturer: syz [ 1601.568061][ T8624] usb 2-1: SerialNumber: syz [ 1601.581076][ T8624] usb 2-1: config 0 descriptor?? [ 1601.633594][ T8624] plusb: probe of 2-1:0.173 failed with error -22 23:50:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x206, @time}) 23:50:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000000), 0x4) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000140)) 23:50:57 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x19, 0x4) 23:50:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, 0xfffffffffffffffe) 23:50:57 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:57 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1601.706437][T25782] usb 2-1: USB disconnect, device number 36 23:50:57 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.metacopy\x00', 0x0, 0x46, 0x0) 23:50:57 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000000}) 23:50:57 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') [ 1601.906182][T19312] Cannot find add_set index 0 as target 23:50:57 executing program 1: rt_sigaction(0xd, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000480)) [ 1601.980760][T19308] Cannot find add_set index 0 as target 23:50:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f00000000c0)={'veth0\x00', @ifru_names}) 23:50:57 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006200)={0x2020}, 0x2020) 23:50:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/graphics', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) 23:50:57 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fcntl$lock(r0, 0x5, &(0x7f0000000040)) 23:50:58 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x10b602, 0x0) 23:50:58 executing program 5: r0 = timerfd_create(0x0, 0x0) fchown(r0, 0xee00, 0xee00) [ 1602.419198][T19312] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1602.430847][T19312] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1602.676661][T19308] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1602.693799][T19308] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:58 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:58 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000002c80)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000100)="f6", 0x1}, {&(0x7f00000001c0)="429cd953a9be7f7319f944c80b60f1dc0d023c9db0d0066bed307314556ef2af43a77e62eb047df4de1f0f7152a4c67f3b72271ea68d69b93d14c37f59b6b92a6c419f5247d2a869521215653b598e675d7d21240ec0651880f42559fea8ed8a4e60c563acfb9d295c77f8758fe3a4f278d6a51fe5b5794cbde4385853cfe404c6e1b701dfb900d68244ef89", 0x8c}, {&(0x7f0000000340)="ae450e2353388df7b88d8c72c1de7f46bfa94fe969d499e37a8f136a666db0f17a652e3ed53bdc11246642500ea79192039c8ea93dd503b9fd7279ffb8d72848ac7253109fb88646", 0x48}], 0x4, 0x0, 0xffffffffffffff9b}}], 0x1, 0x0) 23:50:58 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000540)=""/64, 0x40}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 23:50:58 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flock(r1, 0x2) close(r0) 23:50:58 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 23:50:58 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:58 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flock(r0, 0x2) close(r0) 23:50:58 executing program 1: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f0000019a80)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 23:50:58 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x0, 0x0) 23:50:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) [ 1603.097490][T19371] Cannot find add_set index 0 as target [ 1603.135786][T19371] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 23:50:59 executing program 5: socketpair(0x2, 0xa, 0x4000075, &(0x7f0000000000)) [ 1603.158775][T19371] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:50:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1603.290586][T19377] Cannot find add_set index 0 as target [ 1603.763029][T19377] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1603.788953][T19377] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:50:59 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:50:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/exec\x00') write$FUSE_LK(r0, 0x0, 0x0) 23:50:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000000)=""/9}, {&(0x7f0000000040)=""/224}, {&(0x7f0000000140)=""/10}], 0x31, 0x0, 0x0, 0x0) 23:50:59 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) pipe2(0x0, 0x0) 23:50:59 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$tcp_congestion(r0, &(0x7f0000000040)='veno\x00', 0xffffff37) 23:50:59 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:50:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 23:50:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)={0x14, 0x12, 0x201}, 0x14}}, 0x0) 23:50:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x12e0, 0x0, 0x0, 0x9b, 0x0, "0000000001000000000000000000001c00"}) 23:50:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x19, 0x0, 0x58) [ 1604.092772][T19430] Cannot find add_set index 0 as target 23:51:00 executing program 5: socket(0xa, 0x6, 0x0) 23:51:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0xd, &(0x7f0000000200)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) [ 1604.385225][T19430] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1604.402267][T19430] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1604.451796][T19431] Cannot find add_set index 0 as target [ 1604.927830][T19431] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1604.956334][T19431] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:01 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 23:51:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x11, 0x0, 0x58) 23:51:01 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct]}}, &(0x7f0000000500)=""/207, 0x3a, 0xcf, 0x1}, 0x20) 23:51:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x8001) 23:51:01 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:01 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000140)) 23:51:01 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 23:51:01 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000240)) 23:51:01 executing program 1: clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x58) [ 1605.417842][T19490] Cannot find add_set index 0 as target [ 1605.500481][ T26] audit: type=1326 audit(1634428261.305:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19492 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7b60fea39 code=0x0 [ 1605.510015][T19490] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1605.552144][T19490] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:01 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) 23:51:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000240)={0x0, [0x7, 0x6, 0x80], [{0x0, 0x7, 0x1}, {0x0, 0x4}]}) [ 1606.292758][ T26] audit: type=1326 audit(1634428262.105:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19492 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7b60fea39 code=0x0 [ 1606.447091][T19491] Cannot find add_set index 0 as target [ 1606.566684][T19491] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1606.588521][T19491] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:02 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:02 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000000c0)) 23:51:02 executing program 1: r0 = clone3(&(0x7f0000000440)={0x80020500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000700)={0x8020000, &(0x7f00000004c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) clone3(&(0x7f00000007c0)={0x10000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/200, 0xc8, &(0x7f00000001c0)=""/40, &(0x7f0000000780)=[0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) 23:51:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 23:51:02 executing program 5: syz_open_procfs(0x0, &(0x7f00000006c0)='net/sockstat\x00') 23:51:02 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1606.870332][T19540] Cannot find add_set index 0 as target [ 1606.892131][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.905354][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 23:51:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 23:51:02 executing program 4: utimes(&(0x7f0000000100)='.\x00', &(0x7f0000000180)) 23:51:02 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00!\xea\x06\xfatR\x9e\xa9\xde\xcer\x1bb\xb3/\x06u\x84JK\xd9=\x84\x927\xce\xfb\xdd\xe5%v\xa2/k\xc6DM\xa4\xf0\xca\'\xdbND)\xf6\xb6\'\xef\xe3g\xf8`\xd2J\xd7\xce\x03\xec)\xc7hP\xdc0\x9a\xefJ\xc9\xa1\xc3J\x94\xcc/;\xf7\xd0\x17@t!\xdf\xb2kS~\xa8,\xd5,\x9d\\I\x1bl]m\xee\x8e\xad\xef\x878j\x1e\a\f\xc4\xa9\x82\x17V\xc2\xa8O\xd3\xde\xc20w\x0f6\"\x1b\x85:\xce\xdbf\x0f\xaa\xae,\xeeL-\xfc`\xc4\x80x\x8c\xee\xf3\xcdJe\xa8\xa9P\b\x96\x9d6\xcb\x02\xa1\xb7\x8cv\xb6:\xca\xbe\f\xe2)\xdau*\x1a\x89B\x9c\xe84ue\xb6\xecVe\xa5\xd8\xce\xad\xb4\x1e/>L\xe7\x1d`\xb3\xc6\x96d\xb7r:\x90\x00\x00\x00\x00\x00\x00', 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='comm\x00') io_submit(r1, 0x3, &(0x7f00000012c0)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)="f8", 0x1}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) 23:51:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000006c00)={0x20000000000000e5, &(0x7f0000006bc0)=[{}]}) 23:51:02 executing program 0: r0 = epoll_create1(0x0) signalfd(r0, &(0x7f0000000040), 0x8) 23:51:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1607.328894][T19540] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1607.354878][T19540] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1607.363669][T19549] Cannot find add_set index 0 as target [ 1607.657709][T19549] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1607.678295][T19549] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:03 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:03 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) 23:51:03 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000600)) 23:51:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) fcntl$setstatus(r0, 0x4, 0x0) 23:51:03 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 23:51:03 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:03 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2, 0x10, r0, 0x82000000) 23:51:03 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0xffffffff}, &(0x7f0000000100), &(0x7f0000000180)={0x0, r0+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) 23:51:03 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x89, 0x0, 0x1, {0x22, 0x6de}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x20}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000240)=@string={0x2}}, {0x0, 0x0}]}) 23:51:03 executing program 5: openat$vcsa(0xffffffffffffff9c, 0x0, 0x418600, 0x0) [ 1607.975332][T19596] Cannot find add_set index 0 as target [ 1608.010421][T19601] Cannot find add_set index 0 as target 23:51:03 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, 0x0) 23:51:04 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) [ 1608.183680][T19601] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1608.240573][T19601] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1608.402029][ T5] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1608.660956][ T5] usb 5-1: Using ep0 maxpacket: 32 23:51:04 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x61bd, 0x0, 0x0, 0x0, 0x0) 23:51:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000940)='comm\x00') read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 23:51:04 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8980, &(0x7f0000000080)) [ 1608.795733][T19596] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1608.821470][ T5] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1608.828394][T19596] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000280)) [ 1609.140677][T19643] Cannot find add_set index 0 as target 23:51:05 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:05 executing program 5: getpid() r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:51:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000040), &(0x7f0000000000)=0x98) [ 1609.348501][T19660] Cannot find add_set index 0 as target [ 1609.377323][T19660] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1609.386296][T19660] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1609.471180][ T5] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1609.480335][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.558368][ T5] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1609.762913][ T5] usb 5-1: USB disconnect, device number 22 [ 1610.177349][T19643] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1610.200365][T19643] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1610.550774][ T3625] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1610.820753][ T3625] usb 5-1: Using ep0 maxpacket: 32 [ 1610.940823][ T3625] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:51:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xf79da662aad0cc8c}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 23:51:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000503002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 23:51:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:06 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:06 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000001c0)) [ 1611.206821][T19713] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1611.217199][ T3625] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 23:51:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c1d624", 0x44, 0x2f, 0x0, @remote, @local}}}}, 0x0) [ 1611.249159][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:51:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 23:51:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x3) [ 1611.320963][ T3625] usb 5-1: can't set config #1, error -71 [ 1611.340467][ T3625] usb 5-1: USB disconnect, device number 23 [ 1611.347766][T19710] Cannot find add_set index 0 as target 23:51:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000000)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb4}}, 0x0) [ 1611.496948][T19732] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:07 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1611.713527][T19739] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1611.765247][T19710] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1611.789111][T19710] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1611.815123][T19709] Cannot find add_set index 0 as target 23:51:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r0, &(0x7f0000004080)={0x2020}, 0x2020) [ 1612.920071][T19749] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1613.394244][T19709] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1613.402836][T19709] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:09 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:09 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:09 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000340)) 23:51:09 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/220, 0xdc}], 0x1, 0x0, 0x0) 23:51:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1613.622334][T19783] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1613.705188][T19784] Cannot find add_set index 0 as target [ 1613.724727][T19784] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1613.735182][T19784] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1613.816838][T19785] Cannot find add_set index 0 as target 23:51:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f00000004c0)={'tunl0\x00', 0x0}) 23:51:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000002e40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002c40)=[{{&(0x7f00000002c0)=@abs, 0x6e, 0x0}}], 0x1, 0x10060, &(0x7f0000002e80)={0x0, r1+60000000}) 23:51:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="d4", 0x1}], 0x1, 0x80805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 23:51:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002006ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) close(r0) 23:51:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10}, 0x0) [ 1614.718222][T19804] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1614.726617][T19785] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1614.742988][T19785] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x0) 23:51:10 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:10 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)) 23:51:10 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x9, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 23:51:10 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(r0, r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b48, &(0x7f0000000040)) [ 1615.152620][T19844] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1615.214168][ T26] audit: type=1326 audit(1634428271.026:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19840 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7b60fea39 code=0x0 23:51:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) r1 = memfd_create(&(0x7f0000000000)='-\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000280)=ANY=[@ANYRES16=r1]) 23:51:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:11 executing program 4: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, 0x0) 23:51:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1615.343090][T19850] Cannot find add_set index 0 as target [ 1615.398030][T19857] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "a4fbae737e67e083", "b0cb9d86b1b06401b9d0eab97b57e205", "089d27b7", "ba108a9f44c9220e"}, 0x28) 23:51:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1615.633936][T19867] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1615.724508][T19850] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1615.734357][T19842] Cannot find add_set index 0 as target [ 1615.756351][T19850] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:11 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:11 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 23:51:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48d731508a0b4ff15f715e05182ce7d2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fdbfbf0b2347e78777e2f39ee4fc822aa8c08cb9200afe60c4fa43cc56f689c11a5a4127d3396955b89dd2f33db5e09f3e324535e8fae616de8134f7a5cdc85d85c6a68f382c52fba94d24a5d95b6faef8b45f69e828c8a7c6cf5a650228004b56ace708d74cb06b810401c9f51c9561ba66c", 0xdb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:51:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1616.066202][T19842] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1616.091923][T19842] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1616.209719][T19891] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:12 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:12 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x401, 0x9, 0x1, {0x22, 0x57b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x6, 0x38}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x7, 0xf4}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x33, &(0x7f0000000280)=ANY=[@ANYBLOB="3303fe7cc6dc4457116de47f9cffa9961ffd0a9e5eb1bd68"]}]}) 23:51:12 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x121082, 0x0) [ 1616.319024][T19897] Cannot find add_set index 0 as target 23:51:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1616.375423][T19897] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1616.386742][T19897] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1616.640436][T25606] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1616.941406][T19913] Cannot find add_set index 0 as target [ 1616.983248][T25782] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1617.076479][T19914] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1617.113485][T19913] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:51:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1617.142787][T19913] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1617.170530][T25606] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 23:51:13 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1617.211273][T25606] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1617.231145][T25782] usb 2-1: Using ep0 maxpacket: 32 [ 1617.319831][T19938] Cannot find add_set index 0 as target [ 1617.350424][T25782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.372981][T25782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.391108][T19939] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1617.430858][T25606] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 1617.440295][T19938] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1617.448467][T19938] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:13 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1617.481069][T25606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.512008][T25606] usb 6-1: Product: syz 23:51:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1617.529419][T25606] usb 6-1: Manufacturer: 糾坄洑翤ワ隩ﴟ鸊녞梽 [ 1617.538234][T25606] usb 6-1: SerialNumber: syz [ 1617.550611][T25782] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1617.581259][T25782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.624752][T25782] usb 2-1: Product: syz [ 1617.643920][T25782] usb 2-1: Manufacturer: syz [ 1617.664841][T19957] Cannot find add_set index 0 as target [ 1617.666248][T25782] usb 2-1: SerialNumber: syz [ 1617.685092][T19955] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1617.938648][T19957] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1617.949582][T19957] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1617.950598][T25782] usbhid 2-1:1.0: can't add hid device: -22 [ 1617.992194][T25782] usbhid: probe of 2-1:1.0 failed with error -22 [ 1618.063563][T25606] usbhid 6-1:1.0: can't add hid device: -71 [ 1618.069667][T25606] usbhid: probe of 6-1:1.0 failed with error -71 [ 1618.091374][T25606] usb 6-1: USB disconnect, device number 30 [ 1618.163628][T25602] usb 2-1: USB disconnect, device number 37 [ 1618.700189][T25606] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1618.960190][ T8624] usb 2-1: new high-speed USB device number 38 using dummy_hcd 23:51:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 23:51:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:14 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1619.160402][T25606] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1619.178787][T25606] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1619.200237][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1619.208950][T20006] Cannot find add_set index 0 as target [ 1619.220285][T20006] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1619.228473][T20006] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1619.320915][ T8624] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.351248][ T8624] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 23:51:15 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x401, 0x9, 0x1, {0x22, 0x57b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x6, 0x38}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x7, 0xf4}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x33, &(0x7f0000000280)=ANY=[@ANYBLOB="3303fe7cc6dc4457116de47f9cffa9961ffd0a9e5eb1bd68"]}]}) 23:51:15 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1619.446201][T25606] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 1619.461381][T25606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.496225][T25606] usb 6-1: Product: syz [ 1619.508453][T25606] usb 6-1: Manufacturer: 糾坄洑翤ワ隩ﴟ鸊녞梽 [ 1619.542193][ T8624] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1619.553990][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.582250][T25606] usb 6-1: can't set config #1, error -71 [ 1619.599557][T25606] usb 6-1: USB disconnect, device number 31 [ 1619.620374][ T8624] usb 2-1: Product: syz [ 1619.637473][ T8624] usb 2-1: Manufacturer: syz [ 1619.652414][ T8624] usb 2-1: SerialNumber: syz 23:51:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 1619.700684][T20024] Cannot find add_set index 0 as target 23:51:15 executing program 4: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0xc, @sliced={0x8, [0xffff, 0x9, 0x2, 0x2, 0x1c2, 0x5, 0x2, 0x0, 0x9, 0x3, 0x1, 0x0, 0xffff, 0xe21, 0x9, 0x401, 0x2, 0x8, 0x8, 0x8, 0xa092, 0x6, 0xdd3, 0x3, 0x7f, 0x3ff, 0x3, 0x800, 0x2, 0x57bb, 0x1000, 0x6, 0x2, 0x0, 0x40, 0x7fff, 0x864, 0x2, 0xd472, 0x1, 0x7, 0x7fff, 0x80, 0x8000, 0x6, 0x9, 0x3760], 0x6}}) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getgid() r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000180)={0x1, 0x1, @stop_pts=0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) 23:51:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1619.751639][ T8624] usb 2-1: can't set config #1, error -71 [ 1619.769762][ T8624] usb 2-1: USB disconnect, device number 38 [ 1619.815395][T20042] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 23:51:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1619.965383][T20024] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1619.986104][T20024] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1620.000257][T25606] usb 6-1: new high-speed USB device number 32 using dummy_hcd 23:51:15 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180), 0x0) 23:51:16 executing program 4: syz_io_uring_setup(0x3eb0, &(0x7f0000000280), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) syz_io_uring_setup(0x5b4b, &(0x7f0000001b40), &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001bc0), &(0x7f0000001c00)) [ 1620.280605][ T8624] usb 2-1: new high-speed USB device number 39 using dummy_hcd 23:51:16 executing program 4: openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 1620.453970][T25606] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1620.486453][T25606] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1620.520455][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1620.640786][ T8624] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.674369][ T8624] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.700140][T25606] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 1620.723606][T25606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.768053][T25606] usb 6-1: Product: syz [ 1620.794411][T25606] usb 6-1: Manufacturer: 糾坄洑翤ワ隩ﴟ鸊녞梽 [ 1620.832285][T25606] usb 6-1: SerialNumber: syz [ 1620.910640][ T8624] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1620.933976][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.958110][T20058] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1621.002849][ T8624] usb 2-1: Product: syz [ 1621.030311][ T8624] usb 2-1: Manufacturer: syz [ 1621.065007][ T8624] usb 2-1: SerialNumber: syz [ 1621.360400][ T8624] usbhid 2-1:1.0: can't add hid device: -22 [ 1621.366732][ T8624] usbhid: probe of 2-1:1.0 failed with error -22 23:51:17 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1621.404564][T25606] usbhid 6-1:1.0: can't add hid device: -71 [ 1621.410851][T25606] usbhid: probe of 6-1:1.0 failed with error -71 [ 1621.428530][T25606] usb 6-1: USB disconnect, device number 32 [ 1621.485237][T20096] Cannot find add_set index 0 as target [ 1621.492911][T20096] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1621.502755][T20096] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1621.601679][ T9731] usb 2-1: USB disconnect, device number 39 23:51:17 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) 23:51:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 23:51:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1621.852164][T20119] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:17 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 23:51:17 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:17 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:17 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000340)={0x0, "19303089f97f42c86fc52a47dc6316fc82b71c2a7b0c7728dfc019bfba33bca7"}) 23:51:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1622.160731][T20127] Cannot find add_set index 0 as target [ 1622.176904][T20127] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1622.185478][T20127] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:18 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x44000, 0x0) [ 1622.290399][T20138] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:18 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x1d, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0xee}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x7, 0x2, 0x6}, 0x6c, &(0x7f0000000100)={0x5, 0xf, 0x6c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1}, @generic={0x60, 0x10, 0xb, "73d706c5fcb0b05c62259d78fb4dc936940875415e6033b60c972d1cedc73ba9c4f7e25aadd32621f80cff7464880990356ba9cc5499bca4857864c7cd7ec03db099b1fca193b3a873b64424d594dbe74f57cc1a673b2e65633df1f954"}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 23:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:18 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 1622.486322][T20133] Cannot find add_set index 0 as target [ 1622.505087][T20155] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1622.665511][T20133] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1622.678699][T20133] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:18 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 23:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:18 executing program 1: syz_io_uring_setup(0x1c19, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:51:18 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1622.739845][ T9731] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1622.837096][T20169] Cannot find add_set index 0 as target [ 1622.979844][ T9731] usb 5-1: Using ep0 maxpacket: 32 [ 1623.038173][T20172] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1623.067788][T20169] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1623.089995][T20169] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:19 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x4c81, 0x0) 23:51:19 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000880)={0xffffffffffffffff, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x3c, r0, 0x829, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x11}}}]}, 0x3c}}, 0x0) 23:51:19 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1623.180170][ T9731] usb 5-1: config 1 interface 0 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1623.250887][ T9731] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1623.272338][T20201] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:19 executing program 5: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000100)={0x0, 0x2, 0x3269, 0x1f, 0x0, 0x3d}) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000140)={0x78, "389110b6ee8da9c7d28c142fe970517c1100c4f709997df3bc07593fbddc2afbfb53c46ab56c0c0fef9c388525cacb709929cbd9ed94d033c66edfe951f4b75dae125162e78a2f51732b96045ca37ec3f4a82e1c23c2966f02d0c0fd7149269fe040bfd662ef518bd3261e7e5968ce8d63437671bc7dcb55"}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) syz_io_uring_setup(0x3eb0, &(0x7f0000000280)={0x0, 0x1f16, 0x0, 0x3, 0x356}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1623.430686][T20205] Cannot find add_set index 0 as target [ 1623.477552][T20205] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1623.505576][T20205] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1623.530009][ T9731] usb 5-1: string descriptor 0 read error: -22 [ 1623.537115][ T9731] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1623.548815][ T9731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.632431][ T9731] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1623.847680][T25784] usb 5-1: USB disconnect, device number 24 23:51:20 executing program 4: syz_io_uring_setup(0x1c19, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:51:20 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x26, 0x5, 0x9, &(0x7f0000000000)) 23:51:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x20}}, 0x0) 23:51:20 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:20 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1624.432269][T20239] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:20 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200), 0x20140, 0x0) 23:51:20 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{}, "bda2f3dc945cfc0e", "e8a44bd1123ee3adada6d38a16d0942c", "777855c8", "fc4c1e7921b1c31f"}, 0x28) [ 1624.525882][T20240] Cannot find add_set index 0 as target 23:51:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:20 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 23:51:20 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) [ 1624.629983][T20242] Cannot find add_set index 0 as target 23:51:20 executing program 5: pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)={0x90c}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) 23:51:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1624.706981][T20254] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1624.724657][T20240] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1624.746254][T20240] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:20 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) [ 1624.852334][T20265] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:20 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x00 \x00\x00\x00\x00\x05\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') [ 1625.006403][T20279] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1625.019707][T25782] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1625.106569][T20242] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1625.127246][T20242] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:21 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1625.292000][T25782] usb 5-1: Using ep0 maxpacket: 32 [ 1625.317775][T25784] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1625.347038][T20288] Cannot find add_set index 0 as target [ 1625.404123][T20288] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1625.424486][T20288] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:21 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x0, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:21 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x68000, 0x0) [ 1625.520052][T25782] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1625.578291][T20303] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1625.587029][T25784] usb 6-1: Using ep0 maxpacket: 32 23:51:21 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000140)={0x0, 0x0}) [ 1625.739422][T25784] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1625.757559][T20306] Cannot find add_set index 0 as target [ 1625.759614][T25782] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1625.788377][T25782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.812580][T25782] usb 5-1: Product: syz [ 1625.823916][T25782] usb 5-1: Manufacturer: syz [ 1625.830086][T25782] usb 5-1: SerialNumber: syz [ 1625.876707][T20306] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1625.887381][T20306] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1625.902507][T25782] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1625.990093][T25784] usb 6-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1625.999179][T25784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.079637][T25784] usb 6-1: Product: syz [ 1626.083840][T25784] usb 6-1: SerialNumber: syz [ 1626.111183][T25782] usb 5-1: USB disconnect, device number 25 [ 1626.133252][T25784] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1626.337370][T25784] usb 6-1: USB disconnect, device number 33 [ 1626.879654][ T8624] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1627.119479][ T8624] usb 5-1: Using ep0 maxpacket: 32 [ 1627.119633][T25784] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1627.369814][T25784] usb 6-1: Using ep0 maxpacket: 32 [ 1627.370307][ T8624] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1627.499578][T25784] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1627.539531][ T8624] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1627.548946][ T8624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.557357][ T8624] usb 5-1: Product: syz [ 1627.562029][ T8624] usb 5-1: Manufacturer: syz [ 1627.566796][ T8624] usb 5-1: SerialNumber: syz [ 1627.612429][ T8624] usbhid 5-1:1.0: couldn't find an input interrupt endpoint 23:51:23 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 23:51:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:23 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:23 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x410201, 0x0) [ 1627.699084][T19941] usb 5-1: USB disconnect, device number 26 [ 1627.719605][T25784] usb 6-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1627.728715][T25784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.773491][T20370] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1627.784856][T25784] usb 6-1: Product: syz [ 1627.798175][T25784] usb 6-1: SerialNumber: syz [ 1627.825041][T20368] Cannot find add_set index 0 as target [ 1627.852421][T25784] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1627.885528][T20368] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1627.894457][T20368] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0xea05ca78f04ac25b, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0) 23:51:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:23 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:23 executing program 1: pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:51:23 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 1628.004763][T25784] usb 6-1: USB disconnect, device number 34 [ 1628.092054][T20399] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1628.099831][T20398] Cannot find add_set index 0 as target 23:51:24 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={0x0}) [ 1628.144161][T20398] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1628.182139][T20398] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1628.299570][T20406] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:24 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1628.349438][T19941] usb 5-1: new high-speed USB device number 27 using dummy_hcd 23:51:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:24 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x400, 0x200000) 23:51:24 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0xfb81c709a28bda1a) [ 1628.599448][T19941] usb 5-1: Using ep0 maxpacket: 32 [ 1628.676162][T20421] Cannot find add_set index 0 as target 23:51:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1628.749478][T19941] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1628.937787][T20419] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1628.975936][T20421] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1628.994453][T20421] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:24 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x58002, 0x0) 23:51:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:24 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1629.119397][ T3625] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1629.159040][T20442] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1629.201253][T19941] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1629.230133][T19941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:51:25 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) [ 1629.277756][T19941] usb 5-1: SerialNumber: syz [ 1629.351974][T19941] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1629.409579][ T3625] usb 6-1: Using ep0 maxpacket: 32 [ 1629.454571][T20451] Cannot find add_set index 0 as target [ 1629.518802][T20451] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1629.541020][T20451] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1629.559786][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.595520][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.631398][T20447] usb 5-1: USB disconnect, device number 27 [ 1629.808713][ T3625] usb 6-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1629.818604][ T3625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.835558][ T3625] usb 6-1: Product: syz [ 1629.845969][ T3625] usb 6-1: Manufacturer: syz [ 1629.858203][ T3625] usb 6-1: SerialNumber: syz [ 1630.185810][ T3625] usbhid 6-1:1.0: can't add hid device: -22 [ 1630.193303][ T3625] usbhid: probe of 6-1:1.0 failed with error -22 [ 1630.217815][ T3625] usb 6-1: USB disconnect, device number 35 [ 1630.419397][T20447] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1630.669247][T20447] usb 5-1: Using ep0 maxpacket: 32 [ 1630.789438][T20447] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1630.929270][ T3625] usb 6-1: new high-speed USB device number 36 using dummy_hcd 23:51:26 executing program 4: read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000240)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) syz_io_uring_setup(0x3eb0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x356}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_setup(0x42e5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xec}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000700), 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000780), 0x4e8000, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000980)={{0x1, 0x0, 0x1ff, 0x2, 0x0, 0x2}, 0x286, [0x2, 0x6, 0x5dd2, 0x437, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x9, 0x80, 0x6, 0xfffff801, 0x0, 0x10001, 0x324b1318, 0x0, 0x101, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x6, 0x3, 0x6, 0x4, 0x8, 0x0, 0x0, 0x0, 0x81, 0x9751, 0x0, 0x0, 0x0, 0x81, 0xba62, 0x6, 0x7f, 0x0, 0x500000, 0x7, 0x0, 0x5cf2, 0x10000, 0x0, 0x5, 0x10001, 0x0, 0x0, 0xfe, 0x0, 0xa6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0xc, 0x9, 0x1bf, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8000, 0x1ff, 0xffffffff, 0x4, 0x387, 0x7, 0x0, 0x3, 0x3, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x9, 0x4, 0x800, 0x1, 0x0, 0xfffffffa, 0x5, 0x0, 0x75, 0x5, 0x6, 0x0, 0x2, 0x0, 0x406, 0x0, 0xfffffff9, 0x7, 0x0, 0x0, 0x9, 0x1bf, 0x4, 0x0, 0x0, 0x8000, 0x101, 0x0, 0x6, 0x1, 0x0, 0x0, 0x60, 0x0, 0x0, 0x8, 0x8000, 0x8, 0x9352, 0x0, 0x2, 0x0, 0x9, 0x6, 0x2, 0x0, 0x1, 0x200, 0xbf, 0x0, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x2, 0x80000000, 0x7, 0x8000, 0x1, 0x3bc, 0xb9, 0x0, 0x4, 0x10000, 0x4f1e0f07, 0x10000, 0x5, 0x9, 0x9, 0xa1, 0xffffffff, 0x0, 0x5, 0x6, 0x937f, 0x8, 0x0, 0x0, 0x0, 0x6, 0x7, 0x7fff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x5c159c88, 0x0, 0x2, 0x7ff, 0x7, 0x0, 0x3f, 0x3, 0x2, 0x8, 0x5, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x200, 0x16, 0x1, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x426, 0xffffffff, 0xb103, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x2, 0x0, 0x4, 0xacf6, 0x0, 0x6a68, 0x400, 0x0, 0x2117cdac, 0x4, 0x1, 0x1, 0x3, 0x8, 0x0, 0x8001, 0x4, 0x2, 0x80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x10001, 0x0, 0x0, 0x52, 0x0, 0x3, 0x2, 0x7fe00, 0x7fffffff, 0x7, 0x4, 0x0, 0x100, 0x2, 0xfff, 0x1, 0xffffff58, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x9, 0x1, 0x1, 0x14000, 0x0, 0x0, 0x9fe7, 0xe6, 0x0, 0xfffffffc, 0x0, 0x3, 0x6, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x10001, 0x3, 0x0, 0x3f, 0x200, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x101, 0x0, 0xffff, 0x4, 0x8, 0x800, 0xff, 0x0, 0xfffff882, 0x0, 0x6, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x8, 0x3, 0xfffffff7, 0x5c665022, 0x0, 0x8, 0x246, 0x0, 0xa07, 0x0, 0xffff, 0x0, 0xb5, 0x3, 0x2, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x3f, 0x4, 0x9, 0x0, 0x69e, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x7fff, 0x0, 0xffff, 0x3, 0x6, 0x9, 0xffff, 0x9, 0x28, 0xfffffffb, 0x76, 0x0, 0x7, 0x9ce, 0x1, 0x3, 0x21, 0x0, 0x4, 0x1, 0x6c, 0x0, 0x6, 0xcc5, 0x7fffffff, 0x9, 0x2, 0x5d36, 0x3, 0x0, 0x9, 0x7, 0x9, 0x0, 0x0, 0x5, 0x6, 0x7f, 0x0, 0x0, 0x72e7bcfd, 0x0, 0x4, 0x0, 0x0, 0x8001, 0xfd65, 0x18, 0x8b9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0xffffffff, 0x30e, 0x401, 0x8, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x61, 0x3, 0x401, 0x0, 0x400, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x12, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7, 0xffff, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x0, 0x4, 0x7, 0x0, 0x0, 0x2, 0xffff, 0x4, 0x8, 0x0, 0x0, 0x405, 0x3, 0x10, 0x3, 0x1, 0x9, 0xfffffffb, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x4ed, 0x0, 0x9, 0x401, 0x0, 0x0, 0x0, 0x6e, 0x919, 0x259e, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0xb4a4, 0x1, 0x4, 0x0, 0x7, 0x0, 0x7, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x81, 0x1, 0x718b, 0x1, 0x0, 0x1000, 0x7, 0x0, 0x2, 0x9, 0x7fffffff, 0xff, 0x9a, 0x0, 0x6, 0x1, 0x2, 0xdd9, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x8001, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x3, 0x7, 0x2, 0x6, 0x7, 0x0, 0x2, 0x4, 0x0, 0x2, 0x4, 0x8001, 0x7f, 0x7, 0x0, 0x0, 0x7fffffff, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffff8087, 0x41, 0x7fffffff, 0x0, 0x2, 0x0, 0xffff8001, 0x6, 0x9, 0x0, 0x4, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffff8, 0xfffffbff, 0x0, 0x1, 0x1ff, 0x80000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x5, 0x6, 0x2, 0x8, 0x0, 0x5, 0x1f, 0xffffffff, 0x0, 0x0, 0x1ff, 0x7, 0x101, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x100, 0x3, 0x9, 0x0, 0x2fde, 0x20, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x287, 0x0, 0x7, 0x0, 0x57f5, 0xfffffff8, 0xfffffffc, 0x0, 0x8001, 0x2, 0x1, 0xd71e, 0x0, 0x1ff, 0xffffffff, 0x8001, 0x1ff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x9, 0x7, 0x8, 0xe33, 0xffffffc1, 0x5, 0x800, 0x0, 0x0, 0x9, 0x0, 0x8, 0x4, 0x6, 0x0, 0x3, 0x1f, 0x0, 0x0, 0xfff, 0x7, 0xfffffff9, 0x4ed, 0x8, 0x0, 0x0, 0x9, 0x7f, 0xffffffff, 0x8, 0xe112, 0x3, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x20, 0x9, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x4, 0x2, 0xffffffff, 0x0, 0x5c, 0x9, 0x0, 0x0, 0x1, 0x5, 0x8, 0x1, 0x1, 0x96e, 0x0, 0x0, 0x2, 0x0, 0xfffffff7, 0x7, 0x1, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x21d, 0x9, 0x3, 0x0, 0xff, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x2, 0x5, 0x0, 0x8, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x7, 0xe3, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb3, 0x6, 0x80000000, 0x9, 0x9, 0x2, 0x6, 0x0, 0x9022, 0x9, 0x3ff, 0xfffffff7, 0x0, 0x5, 0xffffffff, 0x0, 0xe2d, 0x0, 0x2, 0x1, 0x0, 0x100, 0x0, 0xfff, 0x0, 0xb3, 0x2fd, 0x9, 0x8, 0x7, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x400, 0x2, 0x0, 0x0, 0x0, 0xfff, 0x1b5, 0x7fffffff, 0x7fff, 0x4, 0xfffffff8, 0x8, 0x0, 0x0, 0x0, 0x7, 0xfffffff3, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x5, 0x800, 0x8, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x800, 0x69b, 0x6, 0x9, 0x0, 0x0, 0x8, 0x0, 0xffffff81, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x10001, 0x1, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x6, 0x7ff, 0x0, 0xfffffc00, 0x1, 0x0, 0x5, 0x9, 0x3, 0xacc, 0xfffffffe, 0x80, 0x0, 0x8, 0x5, 0x1, 0x0, 0x9, 0x0, 0x1d8, 0x7, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7, 0x1, 0x0, 0x400, 0x75b437d4, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x6, 0x0, 0x1, 0x0, 0x1f, 0x5, 0x7, 0x100, 0x72, 0x8, 0xfe, 0x8, 0x72, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x5, 0x0, 0x1809, 0x80, 0x0, 0x3, 0xcc, 0x7, 0x3, 0x0, 0x8, 0x3, 0x3, 0x0, 0x400, 0x8, 0x0, 0x0, 0x1, 0x1, 0xffffffff, 0x7f800, 0x24, 0x1ff, 0x8, 0x0, 0x0, 0x1, 0x3ff, 0x3fec6042, 0x0, 0x0, 0x8, 0x0, 0x5, 0x80000000, 0x8, 0x6, 0x7, 0x7, 0x0, 0x1, 0x5, 0x8, 0x0, 0xfffffffa, 0x6, 0x0, 0x4, 0xf642, 0xfffffffe, 0xfffffffc, 0x0, 0xbb, 0x0, 0xdec, 0x0, 0x1f, 0xff, 0x8, 0x0, 0x0, 0x0, 0x7e, 0x4, 0x3, 0xbcc5b2, 0x6, 0x0, 0x7fff, 0x1, 0x400, 0x0, 0xc8]}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) r5 = io_uring_setup(0x3d9a, &(0x7f0000001ac0)={0x0, 0x0, 0x4, 0x3, 0x2f5, 0x0, r4}) syz_io_uring_setup(0x5b4b, &(0x7f0000001b40)={0x0, 0xf219, 0x2, 0x0, 0x6e, 0x0, r5}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001bc0), &(0x7f0000001c00)) 23:51:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:26 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:26 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x1d, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0xee, 0x1, {0x22, 0x6de}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x2, 0x6, 0x0, 0x1}, 0x54, &(0x7f0000000100)={0x5, 0xf, 0x54, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x1, 0x3f}, @generic={0x48, 0x10, 0xb, "73d706c5fcb0b05c62259d78fb4dc936940875415e6033b60c972d1cedc73ba9c4f7e25aadd32621f80cff7464880990356ba9cc5499bca4857864c7cd7ec03db099b1fca1"}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f0000000300)=@string={0x7d, 0x3, "c2de95109c08637df6e87fb558743a977dfa079539efe71fa2aeff5888772ede41db3d5cbf4dc7ac5cafbf6627efc501749345960374c5323b2e02a1e86cac85c9fe8812fe9a24b630c678e6e70158c0a1e598f18b03396f332846d9285397c6b6614a32f2f268353cea924d55e9ee3101aafb13887db9ee166a80"}}, {0x2, &(0x7f0000000240)=@string={0x2}}, {0x0, 0x0}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "9657cfdf6b69181373af5e3620d06bb2a2ebc86175c0018ff3040876e9f0335cd41c818ef9c43364ace81eb0e924cbce7d3813"}}]}) 23:51:26 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) [ 1631.135975][T20500] Cannot find add_set index 0 as target [ 1631.146047][T20505] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, 0x0) 23:51:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1631.180756][T20447] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1631.189968][ T3625] usb 6-1: Using ep0 maxpacket: 32 [ 1631.204424][T20447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.277963][T20500] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1631.289831][T20447] usb 5-1: can't set config #1, error -71 [ 1631.298024][T20447] usb 5-1: USB disconnect, device number 28 [ 1631.316039][T20500] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1631.329559][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.346780][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.362150][T20519] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1631.449234][ T5] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1631.544615][T20508] Cannot find add_set index 0 as target [ 1631.560920][ T3625] usb 6-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1631.574518][ T3625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.598821][ T3625] usb 6-1: Product: syz [ 1631.607362][ T3625] usb 6-1: Manufacturer: syz [ 1631.621276][ T3625] usb 6-1: SerialNumber: syz [ 1631.682183][T20508] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1631.709203][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 1631.715396][T20508] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:51:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:51:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1631.899867][ T3625] usbhid 6-1:1.0: can't add hid device: -22 [ 1631.905875][ T3625] usbhid: probe of 6-1:1.0 failed with error -22 [ 1631.943041][ T3625] usb 6-1: USB disconnect, device number 36 [ 1631.949438][ T5] usb 2-1: config 1 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1632.001524][ T5] usb 2-1: config 1 interface 0 has no altsetting 0 23:51:27 executing program 4: socket(0x3, 0x0, 0x9ffe) [ 1632.230582][ T5] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1632.244478][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.254079][ T5] usb 2-1: Product: 《 [ 1632.258268][ T5] usb 2-1: Manufacturer: ࠖ 23:51:28 executing program 4: pselect6(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) [ 1632.264304][ T5] usb 2-1: SerialNumber: ႕࢜絣땿瑘霺墳锇ῧ꺢壿瞈尽䶿곇꽜暿Dž鍴际球㋅⸻ꄂ注薬ﻉኈ髾똤옰ǧ쁘΋漹⠳匨욗憶㉊㕨䶒㇮ꨁᏻ綈樖 [ 1632.341967][ T5] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1632.418362][T20545] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1632.459123][ T3625] usb 6-1: new high-speed USB device number 37 using dummy_hcd 23:51:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1632.562094][ T5] usb 2-1: USB disconnect, device number 40 23:51:28 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) [ 1632.686962][T20577] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1632.749327][ T3625] usb 6-1: Using ep0 maxpacket: 32 [ 1632.875597][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.886883][ T3625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 23:51:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1633.018605][T20586] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1633.086718][ T3625] usb 6-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1633.097877][ T3625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.115319][ T3625] usb 6-1: Product: syz [ 1633.122169][ T3625] usb 6-1: Manufacturer: syz [ 1633.126908][ T3625] usb 6-1: SerialNumber: syz [ 1633.319030][ T8624] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1633.469402][ T3625] usbhid 6-1:1.0: can't add hid device: -22 [ 1633.475376][ T3625] usbhid: probe of 6-1:1.0 failed with error -22 [ 1633.491019][ T3625] usb 6-1: USB disconnect, device number 37 [ 1633.559154][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1633.759228][ T8624] usb 2-1: config 1 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1633.772551][ T8624] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1633.939533][ T8624] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1633.948642][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.976268][ T8624] usb 2-1: Product: 《 [ 1633.984084][ T8624] usb 2-1: Manufacturer: ࠖ [ 1633.988720][ T8624] usb 2-1: SerialNumber: ႕࢜絣땿瑘霺墳锇ῧ꺢壿瞈尽䶿곇꽜暿Dž鍴际球㋅⸻ꄂ注薬ﻉኈ髾똤옰ǧ쁘΋漹⠳匨욗憶㉊㕨䶒㇮ꨁᏻ綈樖 [ 1634.051551][ T8624] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 23:51:29 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 23:51:29 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x1d, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0xee}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x0, 0x6}, 0x7a, &(0x7f0000000100)={0x5, 0xf, 0x7a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0xe3, 0x5, 0x1f}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x1, 0x3f}, @generic={0x63, 0x10, 0x0, "73d706c5fcb0b05c62259d78fb4dc936940875415e6033b60c972d1cedc73ba9c4f7e25aadd32621f80cff7464880990356ba9cc5499bca4857864c7cd7ec03db099b1fca193b3a873b64424d594dbe74f57cc1a673b2e65633df1f9544785fd"}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4f, &(0x7f0000000300)=@string={0x4f, 0x3, "c2de95109c08637df6e87fb558743a977dfa079539efe71fa2aeff5888772ede41db3d5cbf4dc7ac5cafbf6627efc501749345960374c5323b2e02a1e86cac85c9fe8812fe9a24b630c678e6e7"}}, {0x1a, &(0x7f0000000240)=@string={0x1a, 0x3, "71187f1630319010198422c5328ba012a973ea9bdd9d7f12"}}, {0x0, 0x0}, {0x0, 0x0}]}) 23:51:29 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:29 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:29 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) [ 1634.116371][ T3625] usb 2-1: USB disconnect, device number 41 [ 1634.179606][T20613] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x3f) timer_create(0x2, 0x0, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, r1+10000000}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) [ 1634.313254][T20626] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1634.336664][T20621] Cannot find add_set index 0 as target 23:51:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1634.363947][T20628] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 1634.363947][T20628] program syz-executor.5 not setting count and/or reply_len properly [ 1634.382593][T20621] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1634.399365][T20621] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1634.418268][T20629] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; [ 1634.418268][T20629] program syz-executor.5 not setting count and/or reply_len properly 23:51:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x107) [ 1634.461639][T20618] Cannot find add_set index 0 as target [ 1634.489298][ T8624] usb 5-1: new high-speed USB device number 29 using dummy_hcd 23:51:30 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 1634.574101][T20634] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1634.659155][ T3625] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1634.729260][ T8624] usb 5-1: Using ep0 maxpacket: 32 [ 1634.735069][T20618] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1634.746721][T20618] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1634.929239][ T3625] usb 2-1: Using ep0 maxpacket: 32 [ 1634.938432][ T8624] usb 5-1: config 1 interface 0 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1634.961510][ T8624] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1635.088989][ T3625] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1635.289094][ T3625] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1635.298189][ T3625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.307683][ T3625] usb 2-1: Product: syz [ 1635.312792][ T3625] usb 2-1: SerialNumber: syz [ 1635.330803][ T8624] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1635.351233][ T8624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.366206][ T8624] usb 5-1: SerialNumber: ႕࢜絣땿瑘霺墳锇ῧ꺢壿瞈尽䶿곇꽜暿Dž鍴际球㋅⸻ꄂ注薬ﻉኈ髾똤옰 [ 1635.391688][ T3625] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1635.421527][ T8624] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1635.593382][T25606] usb 2-1: USB disconnect, device number 42 [ 1635.629773][ T3625] usb 5-1: USB disconnect, device number 29 [ 1636.388861][ T8624] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1636.638786][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1636.758883][ T8624] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1636.929085][ T8624] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1636.938325][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.948005][ T8624] usb 2-1: Product: syz [ 1636.953068][ T8624] usb 2-1: SerialNumber: syz [ 1637.001275][ T8624] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 23:51:33 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 23:51:33 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)={0x14, 0x17, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x12000000}, 0x0) 23:51:33 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:33 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:33 executing program 4: pselect6(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) [ 1637.213789][ T8624] usb 2-1: USB disconnect, device number 43 23:51:33 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1637.339365][T20705] Cannot find add_set index 0 as target 23:51:33 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8002, 0x0) 23:51:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x890b, 0x0) 23:51:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 23:51:33 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') 23:51:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) [ 1637.637239][T20705] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1637.651564][T20705] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1637.675563][T20706] Cannot find add_set index 0 as target [ 1637.738840][ T8624] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1637.824125][T20706] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1637.844537][T20706] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1637.997848][ T8624] usb 2-1: Using ep0 maxpacket: 32 [ 1638.122167][ T8624] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1638.298778][ T8624] usb 2-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 1638.308303][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.317600][ T8624] usb 2-1: Product: syz [ 1638.322241][ T8624] usb 2-1: SerialNumber: syz [ 1638.388465][ T8624] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1638.604648][ T3625] usb 2-1: USB disconnect, device number 44 23:51:34 executing program 1: r0 = fork() waitid(0x1, r0, 0x0, 0x4, 0x0) 23:51:34 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 23:51:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 23:51:34 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:34 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:34 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000001c40), 0x400, 0x0) 23:51:35 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) 23:51:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x30, 0x0, 0x25e) 23:51:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 1639.277024][T20775] Cannot find add_set index 0 as target 23:51:35 executing program 1: r0 = socket(0x1, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:51:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) getpeername$packet(r0, 0x0, 0x0) 23:51:35 executing program 4: r0 = socket(0x28, 0x1, 0x0) r1 = dup(r0) write$binfmt_misc(r1, 0x0, 0x0) 23:51:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:51:35 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000003500)={0x0, 0x0, 0x0}, 0x0) 23:51:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x25e) [ 1639.539896][T20775] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1639.564570][T20775] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1640.115244][T20772] Cannot find add_set index 0 as target 23:51:36 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1640.336553][T20772] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1640.353738][T20772] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1640.499133][T20822] Cannot find add_set index 0 as target [ 1640.517666][T20822] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1640.530302][T20822] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:36 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:36 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) 23:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 23:51:36 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 23:51:36 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 23:51:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 23:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:51:36 executing program 1: r0 = socket(0x28, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:51:36 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 23:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:51:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 1641.422915][T20843] Cannot find add_set index 0 as target 23:51:37 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1641.683990][T20843] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1641.708795][T20843] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1641.860209][T20878] Cannot find add_set index 0 as target 23:51:37 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:51:37 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840), 0x8) 23:51:37 executing program 4: syz_open_dev$sg(&(0x7f0000000180), 0xfffffffffffffffe, 0x30000) [ 1641.914016][T20878] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1641.946646][T20878] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:37 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 23:51:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) 23:51:38 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003540), 0x18002, 0x0) 23:51:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:38 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 23:51:38 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80000) [ 1642.515433][T20896] Cannot find add_set index 0 as target 23:51:38 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1643.080343][T20896] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1643.108036][T20896] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1643.191855][T20935] Cannot find add_set index 0 as target [ 1643.223838][T20935] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1643.243705][T20935] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:39 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)={0x14, 0x17, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x12000000}, 0x0) 23:51:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:39 executing program 1: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:39 executing program 4: epoll_create1(0x0) pipe2$9p(&(0x7f0000000100), 0x0) 23:51:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:39 executing program 1: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:39 executing program 4: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) [ 1643.562231][T20969] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:39 executing program 5: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:39 executing program 1: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 1643.886231][T20985] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1644.558407][T20961] Cannot find add_set index 0 as target [ 1644.580943][T20961] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1644.593166][T20961] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:40 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1644.786360][T20996] Cannot find add_set index 0 as target [ 1644.845580][T20996] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1644.857962][T20996] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:40 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:40 executing program 4: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:40 executing program 1: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:40 executing program 5: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 23:51:40 executing program 1: syz_emit_ethernet(0x2a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad3267"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) [ 1645.124380][T21013] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:51:41 executing program 5: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:41 executing program 4: syz_emit_ethernet(0x96, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x1e, 0x4, 0x0, 0x2, 0x88, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@empty}]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@loopback}, {@dev}, {@broadcast}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@loopback}, {@multicast1}, {@local}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}}, 0x18}}, 0x0) 23:51:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x1600bd74, 0x0, 0x25e) 23:51:41 executing program 1: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x9}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 1645.727236][T21025] Cannot find add_set index 0 as target [ 1645.751843][T21025] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 23:51:41 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1645.778802][T21025] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1645.925904][T21063] Cannot find add_set index 0 as target [ 1645.953010][T21063] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1645.963342][T21063] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:41 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:41 executing program 4: syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), 0xffffffffffffffff) 23:51:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}}, 0x18}}, 0x0) 23:51:41 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x2, @empty}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x3c899bb) [ 1646.185507][ C1] net_ratelimit: 3 callbacks suppressed [ 1646.185528][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1646.235622][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 23:51:42 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:42 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:42 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:42 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:42 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}}, 0x18}}, 0x0) [ 1647.004596][T21079] Cannot find add_set index 0 as target [ 1647.132991][T21079] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1647.156736][T21079] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:43 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = getpid() r1 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r1, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r1, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r5, &(0x7f00000003c0)=0xeaa, r2, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:43 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:43 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) [ 1647.554112][T21137] Cannot find add_set index 0 as target 23:51:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), r0) [ 1647.614354][T21135] Cannot find add_set index 0 as target 23:51:43 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:43 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) [ 1648.050685][T21137] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1648.077517][T21137] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:44 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = getpid() r1 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r1, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r1, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r5, &(0x7f00000003c0)=0xeaa, r2, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1648.402238][T21135] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1648.426207][T21135] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1648.573744][T21179] Cannot find add_set index 0 as target 23:51:44 executing program 1: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0xffffffffffffd7f5}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) 23:51:44 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:44 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/class/scsi_tape', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 23:51:44 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000f00)=ANY=[], 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x0, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x6, [{@empty}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}, @ssrr={0x89, 0x1b, 0x8b, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr]}, @timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xf, [{@loopback}, {@dev, 0x5}, {@broadcast}]}, @timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x0, [{@loopback, 0x76}, {@multicast1, 0x2}, {@loopback}, {@local, 0xfc400}, {@multicast1}]}]}}, {{0x0, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, "f0a30b", 0x2, "03175c"}}}}}}, &(0x7f0000000480)={0x1, 0x0, [0x222, 0x0, 0x405, 0xe78]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa19aaaaaaaaaabb81002700000d0400002005050000052cce4a33f967720000848c28f2ad32671394efbfa779504e3dc4264ef40a6e9290b41efeec0f79a6192872f1179775b3802130ee422c0d755b3a"], &(0x7f0000000440)={0x1, 0x0, [0xcdf, 0x9b, 0x3f9, 0xb8c]}) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_ethernet(0x12e, &(0x7f00000005c0)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x2}, {}, {0x8}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x380, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}], @ipv6=@udp={0x5, 0x6, "fac206", 0xd8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x68, 0x5, [0x8b, 0x100000000, 0x1b7]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x7, 0x9, 0x0, 0x0]}}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x4, 0x28, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @dstopts={0x33, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3e}]}], {0x4e22, 0x4e22, 0x8}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x0, 0x0, 0x32c, 0x966]}) r2 = add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, r1) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @multicast1, @local, @remote}}}}, &(0x7f0000000580)={0x1, 0x4, [0x976, 0xf20, 0x72e]}) keyctl$unlink(0x9, r2, 0xfffffffffffffffb) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) syz_emit_ethernet(0xba, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb6004f585f8bb1649600ed3e0c3ae7e5327a7de1281a4d43275b7d47f3bd692d46bbcc652bf9e4827dd28d958e3c510920d32dc0383d8529cd4031accba476fbbb41d2b8e68159875ad5e5d63db40ee3e5758cab2c651d5dd6c2173d4bf07d352d891182712e2156a0166b62f24b8edce15fcf1c38ad821bb7db8a354e0bf7c6eec3ffc3a7701a035c524172c05c21a70d94dc14f034c03e7e3921f474a808d16c85ee8cceb466f3facb4ec764654"], &(0x7f0000000000)={0x0, 0x1, [0x9c6, 0xa81, 0xc27, 0xd88]}) syz_emit_ethernet(0x64, &(0x7f0000000840)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0x2}, {0x8}, {}, {0x5}, {0x3, 0x0, 0x1}], @generic="987deeab0716e4569eafb03be8216ae1e9857c4e6d0c6d2361318a24351f97cd10e5a77f54bff8b2b3b2e6a670c84d5eaf37d3b4ebbdce3c1195918b68df"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x640, 0xdf3, 0xb77]}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaafbffffffaaaaed7a3822a1784b8e31a59ce899080acfe23545d445e213c6c82ada000b095733"], &(0x7f0000000040)={0x0, 0x1, [0xfed, 0x0, 0x421]}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @broadcast, @multicast, @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x0) 23:51:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), 0xffffffffffffffff) [ 1648.616293][T21179] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1648.629399][T21179] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1648.705264][T21195] Cannot find add_set index 0 as target 23:51:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)=ANY=[@ANYBLOB="14000000170001f7cd377e8ea6b9746f01"], 0x14}, 0x1, 0x12000000}, 0x0) 23:51:44 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x80, 0x80000) 23:51:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:51:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2a, 0x0, 0x25e) 23:51:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40080, 0x148) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/513], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x104, 0x304, &(0x7f0000000040)="b90803600000f000009e0ff008001fffffe104004000638877fbac14141ae0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xa0061000, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) r3 = syz_io_uring_setup(0x6596, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x2a88, &(0x7f00000000c0)={0x0, 0xe701, 0x1, 0x2, 0x331, 0x0, r3}) epoll_create(0xffffff81) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) [ 1649.525373][T21195] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1649.541743][T21195] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:51:45 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = getpid() r1 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r1, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r1, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r5, &(0x7f00000003c0)=0xeaa, r2, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) [ 1650.520740][T21238] Cannot find add_set index 0 as target [ 1652.061478][T21238] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1652.086059][T21238] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:50 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:51:50 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:51:50 executing program 5: syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x30000) [ 1654.991808][T21355] Cannot find add_set index 0 as target [ 1655.027916][T21355] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1655.037083][T21355] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1655.055986][T21358] Cannot find add_set index 0 as target [ 1655.879696][T21358] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1655.889599][T21358] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1656.127903][T13699] device hsr_slave_0 left promiscuous mode [ 1656.151456][T13699] device hsr_slave_1 left promiscuous mode [ 1656.158285][T13699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.165739][T13699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.199959][T13699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.217281][T13699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.227006][T13699] device bridge_slave_1 left promiscuous mode [ 1656.237546][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.261140][T13699] device bridge_slave_0 left promiscuous mode [ 1656.277765][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.298400][T13699] device veth1_macvtap left promiscuous mode [ 1656.304467][T13699] device veth0_macvtap left promiscuous mode [ 1656.324494][T13699] device veth1_vlan left promiscuous mode [ 1656.333926][T13699] device veth0_vlan left promiscuous mode [ 1656.561463][T13699] team0 (unregistering): Port device team_slave_1 removed [ 1656.582820][T13699] team0 (unregistering): Port device team_slave_0 removed [ 1656.595426][T13699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.613167][T13699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.684109][T13699] bond0 (unregistering): Released all slaves [ 1663.372065][T21657] chnl_net:caif_netlink_parms(): no params data found [ 1663.455592][T21657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.464267][T21657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.474700][T21657] device bridge_slave_0 entered promiscuous mode [ 1663.485732][T21657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.493688][T21657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.503667][T21657] device bridge_slave_1 entered promiscuous mode [ 1663.542340][T21657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.556058][T21657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.597244][T21657] team0: Port device team_slave_0 added [ 1663.605280][T21657] team0: Port device team_slave_1 added [ 1663.639988][T21657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.647902][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.674289][T21657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.688762][T21657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.695918][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.722862][T21657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.766385][T21657] device hsr_slave_0 entered promiscuous mode [ 1663.774831][T21657] device hsr_slave_1 entered promiscuous mode [ 1663.783829][T21657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1663.791591][T21657] Cannot create hsr debugfs directory [ 1663.911455][T21657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.918579][T21657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.925883][T21657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.933025][T21657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.994498][T21657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.012458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1664.024097][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.032284][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.041139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1664.055559][T21657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.069520][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1664.078310][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.085365][ T8624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.107146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1664.115656][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.122852][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.141481][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1664.153300][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1664.171877][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1664.180680][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1664.193366][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1664.209911][T21657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1664.233030][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1664.241874][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1664.256281][T21657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.286694][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1664.312170][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1664.325465][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1664.334472][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1664.348840][T21657] device veth0_vlan entered promiscuous mode [ 1664.364177][T21657] device veth1_vlan entered promiscuous mode [ 1664.393923][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1664.402999][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1664.419022][T21657] device veth0_macvtap entered promiscuous mode [ 1664.431233][T21657] device veth1_macvtap entered promiscuous mode [ 1664.449689][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1664.460195][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.470467][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1664.483630][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.493799][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1664.504682][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.514926][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1664.525534][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.535502][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1664.546078][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.557577][T21657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.566168][T25784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1664.575524][T25784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1664.584209][T25784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1664.593557][T25784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1664.608012][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1664.618787][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.629294][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1664.640202][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.650553][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1664.661688][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.672176][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1664.683360][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.694121][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1664.705654][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.719186][T21657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.728383][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1664.737957][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1664.847007][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.855254][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.912756][T25784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1664.950891][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.971440][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.988815][T25606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:52:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)={0x18, 0x17, 0x101, 0x0, 0x0, {0x2}, [@nested={0x4, 0x0, 0x0, 0x1, [@generic]}]}, 0x18}, 0x1, 0x12000000}, 0x0) 23:52:00 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000001f40), 0x250041, 0x0) 23:52:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 23:52:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x0, 0x81}]}) 23:52:00 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:00 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 23:52:01 executing program 1: syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x101400) 23:52:01 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000880)={0xffffffffffffffff, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x3c, r0, 0x829, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) [ 1665.207051][T25606] Bluetooth: hci4: command 0x0409 tx timeout 23:52:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) [ 1665.328257][T21995] Cannot find add_set index 0 as target 23:52:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, 0x0) 23:52:01 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x14, &(0x7f00000001c0)={0x5, 0xf, 0x14, 0x2, [@generic={0x3}, @ssp_cap={0xc}]}}) 23:52:01 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000880)={0xffffffffffffffff, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x3c, r0, 0x829, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 23:52:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1401, 0x68dd2ea21639e579}, 0x10}}, 0x0) [ 1665.513899][T21995] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1665.544253][T21995] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1665.641838][T21999] Cannot find add_set index 0 as target 23:52:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 23:52:01 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) [ 1665.856820][ T8624] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1666.106596][ T8624] usb 1-1: Using ep0 maxpacket: 8 [ 1666.307527][ T8624] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1666.322533][T21999] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1666.368024][T21999] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:02 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) [ 1666.497098][T22054] Cannot find add_set index 0 as target [ 1666.507856][ T8624] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1666.529417][ T8624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.551340][ T8624] usb 1-1: Product: syz [ 1666.558399][ T8624] usb 1-1: Manufacturer: syz [ 1666.564526][ T8624] usb 1-1: SerialNumber: syz [ 1666.578179][T22054] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1666.591614][T22054] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:02 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002000)={&(0x7f0000001580)=@file={0x10}, 0x10, &(0x7f0000001900)=[{&(0x7f00000015c0)="17", 0x1}, {&(0x7f00000016c0)="df", 0x1}, {0x0}], 0x3}, 0x20100) 23:52:02 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) 23:52:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xf, r0, &(0x7f0000000300)='rxrpc\x00', 0x0, 0x0) 23:52:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1666.858089][ T3625] usb 1-1: USB disconnect, device number 25 23:52:02 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0x1d, r0, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) [ 1667.298521][ T3625] Bluetooth: hci4: command 0x041b tx timeout [ 1667.559762][T22081] Cannot find add_set index 0 as target [ 1667.669924][T22081] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1667.691354][T22081] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1667.703279][T25784] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1667.996804][T25784] usb 1-1: Using ep0 maxpacket: 8 [ 1668.196490][T25784] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1668.327206][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.333544][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.376799][T25784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1668.385962][T25784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.395993][T25784] usb 1-1: Product: syz [ 1668.401336][T25784] usb 1-1: Manufacturer: syz [ 1668.406054][T25784] usb 1-1: SerialNumber: syz 23:52:04 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x50003, 0x0) 23:52:04 executing program 5: keyctl$search(0xc, 0x0, &(0x7f0000000300)='rxrpc\x00', 0x0, 0x0) 23:52:04 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='gpu_mem_total\x00'}, 0x10) 23:52:04 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:04 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) [ 1668.535129][T25784] usb 1-1: USB disconnect, device number 26 23:52:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0x6, r0, 0x0, 0x0, 0x0) 23:52:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, r1) 23:52:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) [ 1668.719266][T22132] Cannot find add_set index 0 as target 23:52:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 23:52:04 executing program 0: clock_getres(0x0, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000100), 0x100, 0x200) [ 1668.771227][T22131] Cannot find add_set index 0 as target [ 1668.796327][T22132] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1668.804520][T22132] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, &(0x7f0000000200)={0x2}, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 23:52:04 executing program 5: getrandom(&(0x7f0000000000)=""/50, 0x32, 0x2) clock_gettime(0x2, &(0x7f00000042c0)) ioprio_get$pid(0x2, 0xffffffffffffffff) r0 = gettid() ptrace$setregset(0x4205, r0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x81) 23:52:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:52:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x20}]}) [ 1669.097868][T22131] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1669.120057][T22131] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:05 executing program 0: add_key$keyring(&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) [ 1669.383479][ T5] Bluetooth: hci4: command 0x040f tx timeout 23:52:05 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:05 executing program 5: getrandom(&(0x7f0000000000)=""/50, 0x32, 0x2) 23:52:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x12e}]]}, 0x24}}, 0x0) 23:52:05 executing program 4: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) 23:52:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 23:52:05 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) [ 1669.998110][T22195] netlink: 'syz-executor.1': attribute type 302 has an invalid length. 23:52:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x24, &(0x7f0000000080)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "4f2df88e7ca7bc7643cc42ffb8cd73c9b71778f72a2ea58ac7b6e0003340f3d265e5c53d9d8ff16d925d241263979d6182f1e41a01284677836085680ee9c94832cbc7c88218ec47952835e321b3ecae"}, 0xd8) [ 1670.054922][T22199] Cannot find add_set index 0 as target [ 1670.078928][T22200] netlink: 'syz-executor.1': attribute type 302 has an invalid length. 23:52:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'vlan0\x00'}}, 0x80) 23:52:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x18c, 0x204, 0x348, 0x0, 0x440, 0x2e0, 0x2e0, 0x440, 0x2e0, 0x3, 0x0, {[{{@uncond, 0xd1, 0x300, 0x348, 0x800000, {}, [@common=@unspec=@bpf0={{0x230}, {0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 23:52:06 executing program 1: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x41c3, &(0x7f0000000000)) [ 1670.114813][T22204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1670.154383][T22205] xt_CT: You must specify a L4 protocol and not use inversions on it 23:52:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='t'}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="6659bca207b5"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]]}, 0x38}}, 0x0) [ 1670.258282][T22210] xt_bpf: check failed: parse error [ 1670.363199][T22196] Cannot find add_set index 0 as target [ 1670.385456][T22199] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1670.395031][T22199] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:06 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:06 executing program 0: keyctl$search(0xe, 0x0, 0x0, 0x0, 0x0) 23:52:06 executing program 5: mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:52:06 executing program 4: keyctl$search(0x14, 0x0, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) 23:52:06 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3db8a1630f1bdb, 0x0) [ 1670.953083][T22196] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1670.984422][T22196] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1671.198866][T22245] Cannot find add_set index 0 as target 23:52:07 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x800) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 23:52:07 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 23:52:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0x0, 0x0) 23:52:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x12, &(0x7f0000000080)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "4f2df88e7ca7bc7643cc42ffb8cd73c9b71778f72a2ea58ac7b6e0003340f3d265e5c53d9d8ff16d925d241263979d6182f1e41a01284677836085680ee9c94832cbc7c88218ec47952835e321b3ecae"}, 0xd8) [ 1671.299404][T22245] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1671.320549][T22245] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x25}, 0x0) 23:52:07 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0) [ 1671.446173][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 1671.686712][T22263] Cannot find add_set index 0 as target 23:52:07 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:07 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfj~NO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="df7d1661a6", 0x5}, {0x0}], 0x2, 0x40ee1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffff0f) read(r2, &(0x7f0000000200)=""/250, 0x49000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) 23:52:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='veth1\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1, 0x0, 0x0, 0xf}, 0x34}], 0x1, 0x0) 23:52:07 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000040), 0x40) 23:52:07 executing program 0: socket$inet(0x2, 0x0, 0x800) [ 1672.043315][T22263] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1672.061630][T22263] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1672.171956][T22289] loop0: detected capacity change from 0 to 519 [ 1672.288432][T22298] Cannot find add_set index 0 as target 23:52:08 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:08 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0) 23:52:08 executing program 0: setresuid(0x0, 0xee01, 0xee00) r0 = geteuid() setresuid(0xee00, r0, 0x0) 23:52:08 executing program 5: socket(0x1, 0x0, 0x40) [ 1672.430079][T22298] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1672.460939][T22298] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:08 executing program 0: openat$null(0xffffffffffffff9c, 0x0, 0x600400, 0x0) 23:52:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f0000000080)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "4f2df88e7ca7bc7643cc42ffb8cd73c9b71778f72a2ea58ac7b6e0003340f3d265e5c53d9d8ff16d925d241263979d6182f1e41a01284677836085680ee9c94832cbc7c88218ec47952835e321b3ecae"}, 0xd8) 23:52:08 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) [ 1673.052409][T22321] Cannot find add_set index 0 as target [ 1673.623018][T22321] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1673.638667][T22321] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:09 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 23:52:09 executing program 4: r0 = socket$inet_icmp_raw(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) 23:52:09 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)) 23:52:09 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 23:52:10 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:10 executing program 4: clock_adjtime(0x0, &(0x7f0000000040)={0x1}) 23:52:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000006200)=@req={0x1000, 0x101, 0x3400}, 0x10) 23:52:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r2) 23:52:10 executing program 5: clock_gettime(0x2, &(0x7f0000002e00)) 23:52:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x8, 0x10, 0x0}, 0x78) 23:52:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000006200)=@req={0x1000, 0x101}, 0x10) 23:52:11 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:11 executing program 0: keyctl$search(0x4, 0x0, 0x0, 0x0, 0x0) 23:52:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)=':', 0x1}], 0x2}, 0x0) 23:52:11 executing program 5: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0xf1d4971c944feb82) [ 1673.918629][T22365] Cannot find add_set index 0 as target [ 1674.119528][T22365] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1674.119607][T22365] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1675.185011][T22376] Cannot find add_set index 0 as target [ 1675.304488][T22376] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1675.304516][T22376] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1675.919625][T22422] Cannot find add_set index 0 as target [ 1676.146001][T22422] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1676.153386][T22422] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:12 executing program 1: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0) 23:52:12 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:12 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="09000000000000000003"]}) 23:52:12 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)='tyzfY\xa1_\x1f\xaa}\xb93\xaf\xde0R\xa2H\xb7[\x97\x80\f\xde\x0f\xa3\'\xc7\x9c\x8c\x14Hy\xa5\xcb\xf2\x94\t\xd1\xac\x18\xf9\x9ci\x96\xa2\xfd\t\xeeZ8\x8cs5', 0x0) 23:52:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x4, 0x4) 23:52:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000380)='}*(}\\-+^\x00') 23:52:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) 23:52:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) [ 1677.124841][T22435] Cannot find add_set index 0 as target [ 1677.162091][T22435] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1677.181614][T22435] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:13 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:13 executing program 5: openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x10840, 0x0) 23:52:13 executing program 1: pipe(&(0x7f0000002400)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 23:52:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1e, 0x0, "7ee3017396fe269d78ab77c96a605b11beb9a66764601dff3c6ce218474f0f8676432845aca0215482a795ad3384af991cec81cf7b3e30dca1a41ac1dbb43a7e", "69e28fd4ed2e359af26a46238d019aa5310a4946a4b79e247252e363e0dc6072"}) 23:52:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x0, 0x3}) [ 1677.653177][T22474] Cannot find add_set index 0 as target [ 1678.169780][T22474] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1678.182243][T22474] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:14 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:14 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) 23:52:14 executing program 5: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x80) 23:52:14 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:52:14 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 23:52:14 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:14 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 23:52:14 executing program 4: r0 = gettid() sched_setparam(r0, &(0x7f0000000040)=0x365) 23:52:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 23:52:14 executing program 1: syz_io_uring_setup(0x7914, &(0x7f0000003440), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2b6a, &(0x7f0000000000), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) 23:52:14 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x38) [ 1678.650260][T22520] Cannot find add_set index 0 as target 23:52:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000002380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000002440)=0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000002480)) [ 1678.894477][T22520] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1678.933193][T22520] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1678.975018][T22515] Cannot find add_set index 0 as target [ 1679.457765][T22515] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1679.476850][T22515] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:15 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:15 executing program 5: shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 23:52:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x12, 0x4, 0x4, 0x1002}, 0x40) 23:52:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x4, 0x2, 0xfff, 0x0, 0x1}, 0x40) 23:52:15 executing program 1: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff) openat$null(0xffffff9c, 0x0, 0x0, 0x0) 23:52:15 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:15 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f80)={0x0}}, 0x0) 23:52:15 executing program 4: syz_io_uring_setup(0x3c79, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fork() 23:52:15 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) syz_io_uring_setup(0x7914, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x1, 0x303}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000023c0), &(0x7f00000034c0)) syz_io_uring_setup(0x2b6a, &(0x7f0000000000)={0x0, 0xce29}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) [ 1679.956653][T22570] Cannot find add_set index 0 as target 23:52:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x8000fff}, 0x40) 23:52:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000140)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @xdp, @generic={0x0, "0b7cfd528031c1d86a59e94a65f1"}}) 23:52:15 executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) [ 1680.339725][T22570] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1680.349392][T22570] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1680.568779][T22574] Cannot find add_set index 0 as target [ 1681.722437][T22574] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1681.731777][T22574] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:18 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:18 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0xe48, 0x8) 23:52:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x0) syz_io_uring_setup(0x2afc, &(0x7f0000000040)={0x0, 0x655c, 0x28, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 23:52:18 executing program 0: syz_io_uring_setup(0x1881, &(0x7f0000000080)={0x0, 0xdaba, 0x8, 0x0, 0x36a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:52:18 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x0, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:19 executing program 1: setrlimit(0xf, &(0x7f0000000540)) 23:52:19 executing program 4: fork() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)) 23:52:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x12, 0x4, 0x4, 0x1002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 23:52:19 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0) [ 1683.308848][T22628] Cannot find add_set index 0 as target [ 1683.381875][T22630] Cannot find add_set index 0 as target [ 1683.839135][T22628] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1683.866224][T22628] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1685.117851][T22630] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1685.126351][T22630] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x4949, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 23:52:32 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff) 23:52:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) 23:52:32 executing program 1: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 23:52:32 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:32 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:32 executing program 0: clone3(&(0x7f0000000440)={0x80020500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000007c0)={0x10000000, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/40, &(0x7f0000000780)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) 23:52:32 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x8c000, 0x0) 23:52:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) 23:52:32 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000240), 0x0, 0x0) [ 1697.121281][T22676] Cannot find add_set index 0 as target 23:52:33 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) [ 1697.218226][T22685] Cannot find add_set index 0 as target 23:52:33 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, 0x0) 23:52:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) 23:52:33 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f00000036c0), 0x11d081, 0x0) [ 1697.792139][T22676] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1697.824144][T22676] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1699.344252][T22685] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1699.373029][T22685] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:44 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:44 executing program 0: clone3(&(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:52:44 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) 23:52:44 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 23:52:44 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000240)={0x0, [0x7, 0x6, 0x80], [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 23:52:44 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() r3 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r3, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:44 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 23:52:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 23:52:44 executing program 1: clone3(&(0x7f0000000440)={0x80020500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000700)={0x8020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x0], 0x1}, 0x58) 23:52:44 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x400, 0x0) [ 1708.585927][T22750] Cannot find add_set index 0 as target 23:52:44 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000240)={0x0, [0x7, 0x6, 0x80], [{0x0, 0x7}]}) 23:52:44 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) [ 1709.047192][T22748] Cannot find add_set index 0 as target [ 1709.387470][T22750] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1709.412613][T22750] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1711.393782][T22748] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1711.405539][T22748] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:56 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) splice(r6, &(0x7f00000003c0)=0xeaa, r3, &(0x7f0000000400)=0x1, 0x7f, 0x0) 23:52:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002140)=0x10000, 0x4) 23:52:56 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:52:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x394}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) creat(0x0, 0x140) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x0, 0x1d, 0x0, "943d299217beaf5c81e1b8e79d20e4889797c3fd0237e95449d7f97ad216408f670826f609eec1e55c7d7ff1e651fc28adb1796ff42a4b289d8e4265b818fbf9771bab5df84a0e5a7ddb6cbd49631547"}, 0xd8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x0) 23:52:56 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x0, 0x8}, {0x100, 0x1}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() r2 = getpid() ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd4, 0xfff}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r2, 0xe, 0xffffffffffffffff, 0xa) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000440)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xa0, 0x0, 0x98, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffff}}}}, {{@ip={@empty, @local, 0x0, 0x0, 'geneve1\x00', 'wg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) perf_event_open(&(0x7f0000002400)={0x0, 0xfd01, 0x21, 0x3, 0x7f, 0x2c, 0x0, 0x6, 0x200, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff801, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x0, 0x2, 0xba, 0x4, 0x3, 0x5, 0x0, 0x0, 0x2000000}, r2, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 23:52:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev}, 0x0, @in6=@mcast2, 0x0, 0x4}}, 0xe8) [ 1720.384433][T22808] Cannot find add_set index 0 as target 23:52:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000004500), 0xffffffffffffffff) 23:52:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000a680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20}}], 0x2, 0x0) [ 1720.911300][T22806] Cannot find add_set index 0 as target [ 1720.982659][T22808] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1721.009346][T22808] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1722.879729][T22806] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1722.902529][T22806] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1729.763052][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.769373][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.198837][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.205259][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.172953][ T27] INFO: task khugepaged:33 blocked for more than 143 seconds. [ 1848.180455][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 1848.203216][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1848.211915][ T27] task:khugepaged state:D stack:26456 pid: 33 ppid: 2 flags:0x00004000 [ 1848.252964][ T27] Call Trace: [ 1848.256290][ T27] __schedule+0xb44/0x5960 [ 1848.260730][ T27] ? __lock_acquire+0x162f/0x54a0 [ 1848.272985][ T27] ? mark_lock+0xef/0x17b0 [ 1848.277450][ T27] ? io_schedule_timeout+0x140/0x140 [ 1848.282747][ T27] ? lock_chain_count+0x20/0x20 [ 1848.302952][ T27] schedule+0xd3/0x270 [ 1848.307074][ T27] schedule_timeout+0x1db/0x2a0 [ 1848.311940][ T27] ? usleep_range+0x170/0x170 [ 1848.332948][ T27] ? wait_for_completion+0x16e/0x280 [ 1848.338288][ T27] ? mark_held_locks+0x9f/0xe0 [ 1848.352937][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1848.358275][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1848.372932][ T27] wait_for_completion+0x176/0x280 [ 1848.378086][ T27] ? __flush_work+0x540/0xb10 [ 1848.382779][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 1848.402963][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1848.408217][ T27] __flush_work+0x56e/0xb10 [ 1848.412739][ T27] ? queue_delayed_work_on+0x120/0x120 [ 1848.432917][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1848.437827][ T27] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 1848.462955][ T27] ? queue_work_on+0xda/0x110 [ 1848.467682][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 1848.482941][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1848.489232][ T27] __lru_add_drain_all+0x3fd/0x760 [ 1848.502953][ T27] khugepaged+0x10f/0x55a0 [ 1848.507446][ T27] ? collapse_pte_mapped_thp+0xda0/0xda0 [ 1848.522955][ T27] ? __kthread_parkme+0xce/0x220 [ 1848.527943][ T27] ? finish_wait+0x270/0x270 [ 1848.532637][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1848.552979][ T27] ? __kthread_parkme+0x15f/0x220 [ 1848.558056][ T27] ? collapse_pte_mapped_thp+0xda0/0xda0 [ 1848.582942][ T27] kthread+0x3e5/0x4d0 [ 1848.587066][ T27] ? set_kthread_struct+0x130/0x130 [ 1848.592280][ T27] ret_from_fork+0x1f/0x30 [ 1848.613065][ T27] INFO: task kworker/u4:6:26662 blocked for more than 143 seconds. [ 1848.620987][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 1848.642917][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1848.651618][ T27] task:kworker/u4:6 state:D stack:24856 pid:26662 ppid: 2 flags:0x00004000 [ 1848.672898][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 1848.680410][ T27] Call Trace: [ 1848.692947][ T27] __schedule+0xb44/0x5960 [ 1848.697411][ T27] ? __lock_acquire+0x162f/0x54a0 [ 1848.702475][ T27] ? mark_lock+0xef/0x17b0 [ 1848.722917][ T27] ? io_schedule_timeout+0x140/0x140 [ 1848.728258][ T27] ? lock_chain_count+0x20/0x20 [ 1848.742936][ T27] schedule+0xd3/0x270 [ 1848.747050][ T27] schedule_timeout+0x1db/0x2a0 [ 1848.751920][ T27] ? usleep_range+0x170/0x170 [ 1848.772910][ T27] ? wait_for_completion+0x16e/0x280 [ 1848.778259][ T27] ? mark_held_locks+0x9f/0xe0 [ 1848.793007][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1848.798004][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1848.813923][ T27] wait_for_completion+0x176/0x280 [ 1848.819086][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 1848.842924][ T27] ? srcu_gp_start_if_needed+0x1dc/0xbc0 [ 1848.848698][ T27] __synchronize_srcu+0x1f4/0x290 [ 1848.862932][ T27] ? call_srcu+0xc0/0xc0 [ 1848.867233][ T27] ? rcu_tasks_pregp_step+0x10/0x10 [ 1848.872654][ T27] fsnotify_connector_destroy_workfn+0x49/0xa0 [ 1848.892900][ T27] process_one_work+0x9bf/0x16b0 [ 1848.897900][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1848.922918][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1848.927915][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 1848.942930][ T27] worker_thread+0x658/0x11f0 [ 1848.947675][ T27] ? process_one_work+0x16b0/0x16b0 [ 1848.962934][ T27] kthread+0x3e5/0x4d0 [ 1848.967053][ T27] ? set_kthread_struct+0x130/0x130 [ 1848.972272][ T27] ret_from_fork+0x1f/0x30 [ 1848.992952][ T27] INFO: task kworker/u4:8:13699 blocked for more than 144 seconds. [ 1849.000977][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 1849.022961][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1849.031745][ T27] task:kworker/u4:8 state:D stack:24896 pid:13699 ppid: 2 flags:0x00004000 [ 1849.062901][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 1849.069983][ T27] Call Trace: [ 1849.082904][ T27] __schedule+0xb44/0x5960 [ 1849.087372][ T27] ? __lock_acquire+0x162f/0x54a0 [ 1849.092428][ T27] ? mark_lock+0xef/0x17b0 [ 1849.112873][ T27] ? io_schedule_timeout+0x140/0x140 [ 1849.118214][ T27] ? lock_chain_count+0x20/0x20 [ 1849.132875][ T27] schedule+0xd3/0x270 [ 1849.149146][ T27] schedule_timeout+0x1db/0x2a0 [ 1849.163673][ T27] ? usleep_range+0x170/0x170 [ 1849.168397][ T27] ? wait_for_completion+0x16e/0x280 [ 1849.202863][ T27] ? mark_held_locks+0x9f/0xe0 [ 1849.207685][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1849.212648][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1849.232955][ T27] wait_for_completion+0x176/0x280 [ 1849.238354][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 1849.262950][ T27] ? srcu_gp_start_if_needed+0x1dc/0xbc0 [ 1849.268657][ T27] __synchronize_srcu+0x1f4/0x290 [ 1849.282854][ T27] ? call_srcu+0xc0/0xc0 [ 1849.287236][ T27] ? rcu_tasks_pregp_step+0x10/0x10 [ 1849.292475][ T27] fsnotify_mark_destroy_workfn+0xfd/0x340 [ 1849.312933][ T27] ? fsnotify_put_mark_wake.part.0+0xe0/0xe0 [ 1849.318986][ T27] process_one_work+0x9bf/0x16b0 [ 1849.332857][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1849.338294][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1849.352860][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 1849.367440][ T27] worker_thread+0x658/0x11f0 [ 1849.372209][ T27] ? process_one_work+0x16b0/0x16b0 [ 1849.402236][ T27] kthread+0x3e5/0x4d0 [ 1849.406459][ T27] ? set_kthread_struct+0x130/0x130 [ 1849.411677][ T27] ret_from_fork+0x1f/0x30 [ 1849.461884][ T27] INFO: task syz-executor.0:22692 blocked for more than 144 seconds. [ 1849.491974][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 1849.498978][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1849.532978][ T27] task:syz-executor.0 state:D stack:29224 pid:22692 ppid: 23791 flags:0x00000000 [ 1849.542236][ T27] Call Trace: [ 1849.545643][ T27] __schedule+0xb44/0x5960 [ 1849.550081][ T27] ? find_held_lock+0x2d/0x110 [ 1849.572957][ T27] ? mark_held_locks+0x9f/0xe0 [ 1849.577778][ T27] ? io_schedule_timeout+0x140/0x140 [ 1849.592814][ T27] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1849.598664][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 1849.612824][ T27] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1849.618688][ T27] schedule+0xd3/0x270 [ 1849.632825][ T27] synchronize_rcu_expedited+0x473/0x620 [ 1849.638504][ T27] ? rcu_exp_wait_wake+0xe50/0xe50 [ 1849.652819][ T27] ? finish_wait+0x270/0x270 [ 1849.657453][ T27] ? cond_synchronize_rcu+0x20/0x20 [ 1849.672821][ T27] ? namespace_unlock+0x14f/0x410 [ 1849.677893][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1849.692833][ T27] ? __wake_up_common+0x650/0x650 [ 1849.697922][ T27] ? shrink_dentry_list+0x16/0x490 [ 1849.712815][ T27] ? up_write+0x148/0x470 [ 1849.717192][ T27] namespace_unlock+0x1af/0x410 [ 1849.722062][ T27] ? kern_unmount+0xe0/0xe0 [ 1849.742822][ T27] put_mnt_ns+0x106/0x140 [ 1849.747195][ T27] ? free_nsproxy+0x43/0x4c0 [ 1849.751801][ T27] free_nsproxy+0x43/0x4c0 [ 1849.772894][ T27] switch_task_namespaces+0xaf/0xd0 [ 1849.778142][ T27] do_exit+0xba9/0x2a30 [ 1849.782321][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 1849.802879][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1849.807785][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1849.812651][ T27] ? mm_update_next_owner+0x7a0/0x7a0 [ 1849.832928][ T27] do_group_exit+0x125/0x310 [ 1849.837593][ T27] __x64_sys_exit_group+0x3a/0x50 [ 1849.842640][ T27] do_syscall_64+0x35/0xb0 [ 1849.862881][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1849.869162][ T27] RIP: 0033:0x7f2a05da7a39 [ 1849.882793][ T27] RSP: 002b:00007f2a0331cbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1849.891243][ T27] RAX: ffffffffffffffda RBX: 00007f2a05eaaf60 RCX: 00007f2a05da7a39 [ 1849.922786][ T27] RDX: 00007f2a05da7a39 RSI: 0000000000000000 RDI: 000000000000000b [ 1849.930800][ T27] RBP: 000000000000000b R08: 0000000000000000 R09: 00007f2a05eaaf60 [ 1849.952919][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1849.960931][ T27] R13: 00007f2a063deb2f R14: 00007f2a0331d300 R15: 0000000000022000 [ 1849.982957][ T27] INFO: task syz-executor.0:22694 blocked for more than 145 seconds. [ 1849.991053][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 1850.012858][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1850.021563][ T27] task:syz-executor.0 state:D stack:28632 pid:22694 ppid: 23791 flags:0x00004000 [ 1850.052798][ T27] Call Trace: [ 1850.056123][ T27] __schedule+0xb44/0x5960 [ 1850.060572][ T27] ? find_held_lock+0x2d/0x110 [ 1850.082935][ T27] ? __mutex_lock+0x9b0/0x12f0 [ 1850.087760][ T27] ? io_schedule_timeout+0x140/0x140 [ 1850.093205][ T27] schedule+0xd3/0x270 [ 1850.097545][ T27] schedule_preempt_disabled+0xf/0x20 [ 1850.112799][ T27] __mutex_lock+0xa34/0x12f0 [ 1850.117458][ T27] ? synchronize_rcu_expedited+0x2d5/0x620 [ 1850.132274][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 1850.137950][ T27] ? synchronize_rcu_expedited+0x2a0/0x620 [ 1850.162992][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1850.167911][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1850.182793][ T27] synchronize_rcu_expedited+0x2d5/0x620 [ 1850.188484][ T27] ? rcu_exp_wait_wake+0xe50/0xe50 [ 1850.202812][ T27] ? __wake_up_common_lock+0xde/0x130 [ 1850.208259][ T27] ? find_held_lock+0x2d/0x110 [ 1850.222794][ T27] ? namespace_unlock+0x14f/0x410 [ 1850.227866][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1850.242785][ T27] ? __wake_up_common+0x650/0x650 [ 1850.247865][ T27] ? shrink_dentry_list+0x16/0x490 [ 1850.262798][ T27] ? up_write+0x148/0x470 [ 1850.267182][ T27] namespace_unlock+0x1af/0x410 [ 1850.272054][ T27] ? kern_unmount+0xe0/0xe0 [ 1850.292875][ T27] put_mnt_ns+0x106/0x140 [ 1850.297255][ T27] ? free_nsproxy+0x43/0x4c0 [ 1850.301866][ T27] free_nsproxy+0x43/0x4c0 [ 1850.322856][ T27] switch_task_namespaces+0xaf/0xd0 [ 1850.328109][ T27] do_exit+0xba9/0x2a30 [ 1850.332280][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 1850.352859][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1850.357817][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1850.362689][ T27] ? mm_update_next_owner+0x7a0/0x7a0 [ 1850.378539][ T27] do_group_exit+0x125/0x310 [ 1850.392767][ T27] __x64_sys_exit_group+0x3a/0x50 [ 1850.397826][ T27] do_syscall_64+0x35/0xb0 [ 1850.402254][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1850.422839][ T27] RIP: 0033:0x7f2a05da7a39 [ 1850.427292][ T27] RSP: 002b:00007f2a0331cbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1850.452858][ T27] RAX: ffffffffffffffda RBX: 00007f2a05eaaf60 RCX: 00007f2a05da7a39 [ 1850.460885][ T27] RDX: 00007f2a05da7a39 RSI: 0000000000000000 RDI: 000000000000000b [ 1850.483014][ T27] RBP: 000000000000000b R08: 0000000000000000 R09: 00007f2a05eaaf60 [ 1850.491034][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1850.512829][ T27] R13: 00007f2a063deb2f R14: 00007f2a0331d300 R15: 0000000000022000 [ 1850.532761][ T27] [ 1850.532761][ T27] Showing all locks held in the system: [ 1850.540512][ T27] 2 locks held by kworker/u4:0/8: [ 1850.552762][ T27] 1 lock held by khungtaskd/27: [ 1850.557647][ T27] #0: ffffffff8b981ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1850.582744][ T27] 1 lock held by khugepaged/33: [ 1850.587624][ T27] #0: ffffffff8ba64d48 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 [ 1850.612815][ T27] 1 lock held by in:imklog/6255: [ 1850.617786][ T27] #0: ffff88801c272870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1850.642786][ T27] 5 locks held by kworker/1:7/8624: [ 1850.648124][ T27] 3 locks held by kworker/0:2/25784: [ 1850.662745][ T27] 2 locks held by kworker/u4:6/26662: [ 1850.668147][ T27] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 1850.702733][ T27] #1: ffffc9000329fdb0 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 1850.722744][ T27] 2 locks held by kworker/u4:8/13699: [ 1850.728146][ T27] #0: ffff888010c69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 1850.752731][ T27] #1: ffffc90002f1fdb0 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 1850.772743][ T27] 1 lock held by syz-executor.0/22692: [ 1850.778228][ T27] #0: ffffffff8b98ae68 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4fc/0x620 [ 1850.812739][ T27] 1 lock held by syz-executor.0/22694: [ 1850.818234][ T27] #0: ffffffff8b98ae68 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 [ 1850.842778][ T27] [ 1850.845138][ T27] ============================================= [ 1850.845138][ T27] [ 1850.862808][ T27] NMI backtrace for cpu 0 [ 1850.867246][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 1850.875403][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1850.885537][ T27] Call Trace: [ 1850.888810][ T27] dump_stack_lvl+0xcd/0x134 [ 1850.893421][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 1850.898707][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 1850.903907][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 1850.909954][ T27] watchdog+0xc1d/0xf50 [ 1850.914126][ T27] ? reset_hung_task_detector+0x30/0x30 [ 1850.919696][ T27] kthread+0x3e5/0x4d0 [ 1850.923778][ T27] ? set_kthread_struct+0x130/0x130 [ 1850.928987][ T27] ret_from_fork+0x1f/0x30 [ 1850.933934][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1850.939169][ C1] NMI backtrace for cpu 1 [ 1850.939180][ C1] CPU: 1 PID: 8624 Comm: kworker/1:7 Not tainted 5.15.0-rc5-syzkaller #0 [ 1850.939202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1850.939215][ C1] Workqueue: events prog_array_map_clear_deferred [ 1850.939301][ C1] RIP: 0010:lock_acquire+0x1dc/0x510 [ 1850.939325][ C1] Code: 48 83 c4 20 e8 25 0d da 07 b8 ff ff ff ff 65 0f c1 05 c8 c7 a5 7e 83 f8 01 0f 85 b4 02 00 00 9c 58 f6 c4 02 0f 85 9f 02 00 00 <48> 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 1850.939344][ C1] RSP: 0018:ffffc90017a279f0 EFLAGS: 00000046 [ 1850.939364][ C1] RAX: 0000000000000046 RBX: 1ffff92002f44f40 RCX: ffffffff815bdf9f [ 1850.939378][ C1] RDX: 1ffff11006a014d3 RSI: 0000000000000001 RDI: 0000000000000000 [ 1850.939390][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8fcffb6f [ 1850.939402][ C1] R10: fffffbfff1f9ff6d R11: 0000000000000000 R12: 0000000000000000 [ 1850.939415][ C1] R13: 0000000000000000 R14: ffff888024492e88 R15: 0000000000000000 [ 1850.939428][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1850.939446][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1850.939460][ C1] CR2: 00007fdab22a8018 CR3: 000000000b68e000 CR4: 00000000003506e0 [ 1850.939474][ C1] Call Trace: [ 1850.939483][ C1] ? lock_release+0x720/0x720 [ 1850.939511][ C1] __mutex_lock+0x131/0x12f0 [ 1850.939532][ C1] ? fd_array_map_delete_elem+0x120/0x2e0 [ 1850.939554][ C1] ? fd_array_map_delete_elem+0x120/0x2e0 [ 1850.939576][ C1] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1850.939597][ C1] ? mutex_lock_io_nested+0x1150/0x1150 [ 1850.939618][ C1] ? wait_for_completion_io+0x280/0x280 [ 1850.939639][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1850.939663][ C1] ? prog_array_map_poke_run+0x77/0x6b0 [ 1850.939689][ C1] fd_array_map_delete_elem+0x120/0x2e0 [ 1850.939711][ C1] prog_array_map_clear_deferred+0x10b/0x1b0 [ 1850.939735][ C1] ? array_map_free+0x1e0/0x1e0 [ 1850.939759][ C1] process_one_work+0x9bf/0x16b0 [ 1850.939783][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1850.939811][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1850.939832][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 1850.939858][ C1] worker_thread+0x658/0x11f0 [ 1850.939881][ C1] ? process_one_work+0x16b0/0x16b0 [ 1850.939901][ C1] kthread+0x3e5/0x4d0 [ 1850.939921][ C1] ? set_kthread_struct+0x130/0x130 [ 1850.939945][ C1] ret_from_fork+0x1f/0x30 [ 1851.042715][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1851.185767][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 1851.193947][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.203995][ T27] Call Trace: [ 1851.207268][ T27] dump_stack_lvl+0xcd/0x134 [ 1851.211970][ T27] panic+0x2b0/0x6dd [ 1851.215866][ T27] ? __warn_printk+0xf3/0xf3 [ 1851.220469][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 1851.225666][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1851.231037][ T27] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 1851.237193][ T27] ? watchdog.cold+0x130/0x158 [ 1851.241992][ T27] watchdog.cold+0x141/0x158 [ 1851.246625][ T27] ? reset_hung_task_detector+0x30/0x30 [ 1851.252175][ T27] kthread+0x3e5/0x4d0 [ 1851.256261][ T27] ? set_kthread_struct+0x130/0x130 [ 1851.261462][ T27] ret_from_fork+0x1f/0x30 [ 1851.266165][ T27] Kernel Offset: disabled [ 1851.270495][ T27] Rebooting in 86400 seconds..