xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:38:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x302, 0x0) 12:38:38 executing program 5: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) lchown(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 12:38:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:38:38 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x9, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:38 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x303, 0x0) 12:38:38 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 719.035600][T30981] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:38 executing program 5: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) lchown(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) 12:38:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x304, 0x0) 12:38:39 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xa, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:38:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x8100000000000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:39 executing program 5: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000380)) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) lchown(0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:38:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x305, 0x0) 12:38:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:38:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xb, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:39 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 719.918267][T31034] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:39 executing program 5 (fault-call:2 fault-nth:0): umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x306, 0x0) 12:38:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xc, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) [ 720.195277][T31057] FAULT_INJECTION: forcing a failure. [ 720.195277][T31057] name failslab, interval 1, probability 0, space 0, times 0 [ 720.253376][T31057] CPU: 1 PID: 31057 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 720.261317][T31057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.271380][T31057] Call Trace: [ 720.274693][T31057] dump_stack+0x197/0x210 [ 720.279044][T31057] should_fail.cold+0xa/0x15 [ 720.283656][T31057] ? fault_create_debugfs_attr+0x180/0x180 [ 720.289483][T31057] ? ___might_sleep+0x163/0x2c0 [ 720.294360][T31057] __should_failslab+0x121/0x190 [ 720.299330][T31057] should_failslab+0x9/0x14 [ 720.303845][T31057] __kmalloc+0x2e0/0x770 [ 720.308186][T31057] ? mark_held_locks+0xf0/0xf0 [ 720.312958][T31057] ? mark_lock+0xc2/0x1220 [ 720.317387][T31057] ? _parse_integer+0x190/0x190 [ 720.322252][T31057] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 720.327983][T31057] tomoyo_realpath_from_path+0xcd/0x7b0 [ 720.333529][T31057] ? tomoyo_path_number_perm+0x193/0x520 [ 720.333547][T31057] tomoyo_path_number_perm+0x1dd/0x520 [ 720.333559][T31057] ? tomoyo_path_number_perm+0x193/0x520 [ 720.333575][T31057] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 720.333587][T31057] ? __f_unlock_pos+0x19/0x20 [ 720.333627][T31057] ? __fget+0x384/0x560 [ 720.364903][T31057] ? ksys_dup3+0x3e0/0x3e0 [ 720.369326][T31057] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 720.369344][T31057] ? fput_many+0x12c/0x1a0 [ 720.369366][T31057] tomoyo_file_ioctl+0x23/0x30 [ 720.369387][T31057] security_file_ioctl+0x77/0xc0 [ 720.389686][T31057] ksys_ioctl+0x57/0xd0 [ 720.393859][T31057] __x64_sys_ioctl+0x73/0xb0 [ 720.398475][T31057] do_syscall_64+0xfa/0x760 12:38:39 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 720.403003][T31057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 720.408897][T31057] RIP: 0033:0x45a219 [ 720.412807][T31057] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 720.432523][T31057] RSP: 002b:00007f0768380c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.432539][T31057] RAX: ffffffffffffffda RBX: 00007f0768380c90 RCX: 000000000045a219 [ 720.432549][T31057] RDX: 0000000020000000 RSI: 0000000040084149 RDI: 0000000000000003 [ 720.432558][T31057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 720.432567][T31057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07683816d4 [ 720.432576][T31057] R13: 00000000004c1924 R14: 00000000004d55f0 R15: 0000000000000004 [ 720.457866][T31057] ERROR: Out of memory at tomoyo_realpath_from_path. 12:38:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x88a8ffff00000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:40 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xd, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:38:40 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:40 executing program 5 (fault-call:2 fault-nth:1): umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x307, 0x0) 12:38:40 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 720.736400][T31092] FAULT_INJECTION: forcing a failure. [ 720.736400][T31092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 720.749640][T31092] CPU: 1 PID: 31092 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 720.757541][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.767602][T31092] Call Trace: [ 720.771090][T31092] dump_stack+0x197/0x210 [ 720.775451][T31092] should_fail.cold+0xa/0x15 [ 720.780066][T31092] ? fault_create_debugfs_attr+0x180/0x180 [ 720.785887][T31092] ? lock_downgrade+0x920/0x920 [ 720.790744][T31092] should_fail_alloc_page+0x50/0x60 [ 720.795947][T31092] __alloc_pages_nodemask+0x1a1/0x900 [ 720.801351][T31092] ? __kasan_check_read+0x11/0x20 [ 720.806388][T31092] ? mark_lock+0xc2/0x1220 [ 720.810818][T31092] ? __alloc_pages_slowpath+0x2920/0x2920 [ 720.816549][T31092] ? __kasan_check_read+0x11/0x20 [ 720.821606][T31092] ? fault_create_debugfs_attr+0x180/0x180 [ 720.827417][T31092] cache_grow_begin+0x90/0xd20 12:38:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:40 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xe, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) [ 720.827435][T31092] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 720.827457][T31092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 720.844149][T31092] __kmalloc+0x6b2/0x770 [ 720.848400][T31092] ? mark_held_locks+0xf0/0xf0 [ 720.853168][T31092] ? mark_lock+0xc2/0x1220 [ 720.857601][T31092] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 720.863336][T31092] tomoyo_realpath_from_path+0xcd/0x7b0 [ 720.868891][T31092] ? tomoyo_path_number_perm+0x193/0x520 [ 720.874529][T31092] tomoyo_path_number_perm+0x1dd/0x520 [ 720.874544][T31092] ? tomoyo_path_number_perm+0x193/0x520 [ 720.874567][T31092] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 720.874579][T31092] ? __f_unlock_pos+0x19/0x20 [ 720.874613][T31092] ? __fget+0x384/0x560 [ 720.874631][T31092] ? ksys_dup3+0x3e0/0x3e0 [ 720.874648][T31092] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 720.874662][T31092] ? fput_many+0x12c/0x1a0 [ 720.874681][T31092] tomoyo_file_ioctl+0x23/0x30 [ 720.904790][T31092] security_file_ioctl+0x77/0xc0 [ 720.904814][T31092] ksys_ioctl+0x57/0xd0 [ 720.915443][T31092] __x64_sys_ioctl+0x73/0xb0 [ 720.915463][T31092] do_syscall_64+0xfa/0x760 [ 720.915485][T31092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 720.944218][T31092] RIP: 0033:0x45a219 [ 720.944238][T31092] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 720.967715][T31092] RSP: 002b:00007f0768380c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.967728][T31092] RAX: ffffffffffffffda RBX: 00007f0768380c90 RCX: 000000000045a219 12:38:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x308, 0x0) [ 720.967736][T31092] RDX: 0000000020000000 RSI: 0000000040084149 RDI: 0000000000000003 [ 720.967742][T31092] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 720.967749][T31092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07683816d4 [ 720.967757][T31092] R13: 00000000004c1924 R14: 00000000004d55f0 R15: 0000000000000004 [ 720.979767][T31098] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:40 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0xf, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:38:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x9effffff00000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:41 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) lchown(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x11, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:38:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x309, 0x0) 12:38:41 executing program 5 (fault-call:2 fault-nth:2): umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 721.606144][T31137] FAULT_INJECTION: forcing a failure. [ 721.606144][T31137] name failslab, interval 1, probability 0, space 0, times 0 12:38:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x12, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:41 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 721.685137][T31137] CPU: 1 PID: 31137 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 721.693093][T31137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.703161][T31137] Call Trace: [ 721.706474][T31137] dump_stack+0x197/0x210 [ 721.710831][T31137] should_fail.cold+0xa/0x15 [ 721.715442][T31137] ? fault_create_debugfs_attr+0x180/0x180 [ 721.721272][T31137] ? ___might_sleep+0x163/0x2c0 [ 721.726152][T31137] __should_failslab+0x121/0x190 [ 721.731107][T31137] should_failslab+0x9/0x14 [ 721.735763][T31137] __kmalloc+0x2e0/0x770 [ 721.740026][T31137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 721.746276][T31137] ? d_absolute_path+0x11b/0x170 [ 721.751225][T31137] ? __d_path+0x140/0x140 [ 721.755739][T31137] ? tomoyo_encode2.part.0+0xf5/0x400 [ 721.761121][T31137] tomoyo_encode2.part.0+0xf5/0x400 [ 721.766326][T31137] tomoyo_encode+0x2b/0x50 [ 721.770899][T31137] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 721.776569][T31137] tomoyo_path_number_perm+0x1dd/0x520 12:38:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x2f, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) [ 721.782032][T31137] ? tomoyo_path_number_perm+0x193/0x520 [ 721.787673][T31137] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 721.793488][T31137] ? __f_unlock_pos+0x19/0x20 [ 721.798212][T31137] ? __fget+0x384/0x560 [ 721.802382][T31137] ? ksys_dup3+0x3e0/0x3e0 [ 721.806807][T31137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 721.813049][T31137] ? fput_many+0x12c/0x1a0 [ 721.817479][T31137] tomoyo_file_ioctl+0x23/0x30 [ 721.822261][T31137] security_file_ioctl+0x77/0xc0 [ 721.827204][T31137] ksys_ioctl+0x57/0xd0 [ 721.831368][T31137] __x64_sys_ioctl+0x73/0xb0 [ 721.835966][T31137] do_syscall_64+0xfa/0x760 [ 721.840486][T31137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 721.846383][T31137] RIP: 0033:0x45a219 [ 721.850277][T31137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 721.869884][T31137] RSP: 002b:00007f0768380c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.878303][T31137] RAX: ffffffffffffffda RBX: 00007f0768380c90 RCX: 000000000045a219 [ 721.886287][T31137] RDX: 0000000020000000 RSI: 0000000040084149 RDI: 0000000000000003 [ 721.894270][T31137] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 721.903638][T31137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07683816d4 [ 721.911614][T31137] R13: 00000000004c1924 R14: 00000000004d55f0 R15: 0000000000000004 [ 721.928729][T31147] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x5a, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30a, 0x0) [ 722.042052][T31137] ERROR: Out of memory at tomoyo_realpath_from_path. 12:38:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0xc40f000000000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:42 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000080)='./file0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:38:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30b, 0x0) 12:38:42 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x6b, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:42 executing program 5 (fault-call:2 fault-nth:3): umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:42 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:38:42 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30c, 0x0) 12:38:42 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x7c7, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) [ 722.718992][T31198] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0xf0ffffff00000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30d, 0x0) 12:38:43 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:43 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe5a, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:43 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000000)) 12:38:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:38:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:38:43 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30e, 0x0) 12:38:43 executing program 3: pipe(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:43 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x10, &(0x7f0000000000)) [ 723.613358][T31245] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:43 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4112, &(0x7f0000000000)) [ 723.790467][T31255] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:43 executing program 3: pipe(&(0x7f0000000280)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x30f, 0x0) 12:38:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0xffffffff00000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:43 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4122, &(0x7f0000000000)) 12:38:44 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4140, &(0x7f0000000000)) [ 724.447680][T31287] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 724.776610][T31297] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:44 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x310, 0x0) 12:38:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:38:44 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4141, &(0x7f0000000000)) 12:38:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:44 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4142, &(0x7f0000000000)) 12:38:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 725.110085][T31320] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0xfffffffffffff000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:45 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4143, &(0x7f0000000000)) 12:38:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x311, 0x0) 12:38:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 725.668811][T31352] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:45 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:45 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4144, &(0x7f0000000000)) 12:38:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x312, 0x0) 12:38:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x313, 0x0) 12:38:45 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, &(0x7f0000000000)) [ 726.105840][T31368] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000001c0)={{}, "85de9a5ba17801e9c7405487a5be83440d33fc0bbd2f827a9fb973c8d01b546c"}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:38:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:45 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4148, &(0x7f0000000000)) [ 726.526358][T31395] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 726.656790][T31401] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:46 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x314, 0x0) 12:38:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:38:46 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4161, &(0x7f0000000000)) 12:38:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:46 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4c01, &(0x7f0000000000)) [ 727.216497][T31416] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x315, 0x0) 12:38:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 727.718596][T31447] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 727.755007][T31452] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:47 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x5, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:38:47 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5421, &(0x7f0000000000)) 12:38:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x316, 0x0) 12:38:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) [ 728.299852][T31466] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:47 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5450, &(0x7f0000000000)) 12:38:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x20, 0x2}, 'port0\x00', 0x48, 0x100000, 0x6, 0x4, 0x80, 0x10001, 0x400, 0x0, 0x4, 0x10001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x317, 0x0) 12:38:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:48 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5451, &(0x7f0000000000)) [ 728.662393][T31474] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.862153][T31503] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 728.973530][T31500] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:48 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:38:48 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5452, &(0x7f0000000000)) 12:38:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x318, 0x0) [ 729.304305][T31520] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:38:48 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5460, &(0x7f0000000000)) 12:38:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x82) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x319, 0x0) 12:38:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:49 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x6364, &(0x7f0000000000)) [ 729.805193][T31538] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.973164][T31553] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 730.029146][T31558] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:49 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x7, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:49 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8933, &(0x7f0000000000)) 12:38:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31a, 0x0) 12:38:50 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000000)) 12:38:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31b, 0x0) [ 730.552780][T31573] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:50 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:38:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:38:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 730.933853][T31589] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x371, 0x0) [ 731.156025][T31608] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000100)=0x0) io_getevents(r8, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r10}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r10}}, 0x48) pipe2(&(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000001680), &(0x7f00000016c0)=0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) splice(r12, 0x0, r14, 0x0, 0x80000001, 0x0) io_cancel(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x208, r9, &(0x7f00000002c0)="210dc45b9ecbe9e8bf5efeda6f8033539025bae89082ec9fd7fa7fcc6195ff446ce988ca90a738237bb4e1efd15862560958252cd2e0a7a13fa9cf62fe187525", 0x40, 0xf49, 0x0, 0x4, r12}, &(0x7f0000000340)) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f00000001c0)={0xb44f, 0x9, [{0x9}, {0x1}, {0x7}, {0x1}, {0xc}, {0xb, 0x1}, {0x7, 0x1}, {0x9, 0x1}, {0x3}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e22, 0x0, @mcast1}, r6}}, 0xffffff6e) splice(r5, 0x0, r4, 0x0, 0x1420000a77, 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:38:51 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:38:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:38:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x2) 12:38:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x8, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:38:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x3) 12:38:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:51 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, &(0x7f0000000000)) [ 731.621020][T31631] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:38:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:38:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:51 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, &(0x7f0000000000)) 12:38:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x4) 12:38:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 732.404512][T31661] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 732.753619][T31680] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:38:52 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:52 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x400454ca, &(0x7f0000000000)) 12:38:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x5) 12:38:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 12:38:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 733.125631][T31698] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:53 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40049409, &(0x7f0000000000)) 12:38:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x6) 12:38:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:38:53 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 733.512549][T31713] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.651539][T31728] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.746627][T31734] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:53 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xa, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x7) 12:38:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:53 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40082406, &(0x7f0000000000)) 12:38:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:38:53 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) [ 734.319899][T31747] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300116e0000b396791980000000ff3f0377b900450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x2, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xc) 12:38:54 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184150, &(0x7f0000000000)) 12:38:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 734.840333][T31785] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:54 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xc, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x16, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:54 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 12:38:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x300) 12:38:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:38:54 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020940d, &(0x7f0000000000)) [ 735.410561][T31802] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) fcntl$setsig(r2, 0xa, 0x26) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa02, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x500) 12:38:55 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000000)) 12:38:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 735.897265][T31835] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.933400][T31841] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:55 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:55 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x800454d2, &(0x7f0000000000)) 12:38:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x600) 12:38:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0x1b, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:56 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, &(0x7f0000000000)) [ 736.573873][T31860] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x700) 12:38:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:38:56 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80086301, &(0x7f0000000000)) 12:38:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 736.940014][T31873] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.085252][T31893] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.190364][T31902] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:57 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x10, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:57 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000000000)) 12:38:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xc00) 12:38:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:38:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:38:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x3f00) [ 737.801413][T31920] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:57 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184151, &(0x7f0000000000)) 12:38:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x3f00, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x4000) 12:38:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 738.084821][T31921] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.278730][T31953] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.337081][T31958] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:58 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x12, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:58 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184153, &(0x7f0000000000)) 12:38:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:38:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x70800) 12:38:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:38:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 738.953943][T31977] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000000c0)=[0x1, 0x3], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x72fff) 12:38:58 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80404509, &(0x7f0000000000)) 12:38:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:38:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3f00, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 739.415280][T32010] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.514717][T32017] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x48, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:38:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:38:59 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, &(0x7f0000000000)) 12:38:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x80700) 12:38:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2000000, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3f000000, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:59 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000000000)) [ 740.063283][T32035] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:38:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r6 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a78, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:38:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:38:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:38:59 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:38:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x1000000) [ 740.667969][T32073] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:00 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:00 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:39:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x2000000) 12:39:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x3000000) 12:39:00 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0189436, &(0x7f0000000000)) [ 741.099647][T32092] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) setns(0xffffffffffffffff, 0x4000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x4000000) 12:39:00 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc020660b, &(0x7f0000000000)) [ 741.675698][T32123] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.875463][T32129] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 742.283371][T32119] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:01 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:01 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x5000000) 12:39:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:01 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000000)) 12:39:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:02 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) [ 742.453193][T32148] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:02 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x6000000) 12:39:02 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) [ 742.998971][T32153] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.207831][T32187] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:03 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x60, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x7000000) 12:39:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:03 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 12:39:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:03 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 12:39:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 743.776316][T32200] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xc000000) [ 743.833392][T32211] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 744.578569][T32250] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:04 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x68, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x3f000000) 12:39:04 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1105517, &(0x7f0000000000)) 12:39:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x80000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x1000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000340)={0x4, 0xfff, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) r3 = fcntl$dupfd(r0, 0x203, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) io_setup(0x3, &(0x7f0000000080)=0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f00000001c0)="c8dd536453b6d4ce96c61604b349e38c665050407b6952f04074528aa6fa803c2af1893d7378f360ca7f3abf35b7f9c55495f4465a56ff971416578a8effceab7295e8a082d84bea0bc73d87d31086c61a1cbceb6edeb2cf44da1a15bc973b1765670f2c123206fec2afc76d6a22d5e413a6e59f8a54e498a9e401eb512d8090f57240373d8c238286ec10ee23474a3fe169ee8b203b0901a8b0f608b8a11c4904cff55b6c4decbe922015dcadc8ac47028de174b1e29697ddb9acbc88ba1503a9f1c6f91ee0d19357e7ef5b17150187c6b4a6a75bf24453847db403838e19fb", 0xe0, 0x5, 0x0, 0x0, r10}]) 12:39:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x40000000) 12:39:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:04 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 745.091852][T32264] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xff2f0700) 12:39:04 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000000)) [ 745.618753][T32262] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 745.834263][T32304] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 746.030596][T32276] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:05 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x222000, 0x0) dup3(r4, r7, 0x1c0000) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x352e32eab4c60300, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x27, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r9}}, 0x48) fsetxattr$security_selinux(r6, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x3) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x7ffffffff000) 12:39:05 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl(r0, 0x40084149, &(0x7f0000000000)) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f00000000c0)=""/139, &(0x7f0000000040)=0x8b) 12:39:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 746.360978][T32330] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x8070000000000) 12:39:06 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket(0x1c, 0x3, 0xff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r2}) ioctl(r0, 0x40084149, &(0x7f0000000000)) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_dccp_int(r3, 0x21, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) accept$unix(r3, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) 12:39:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 746.929847][T32313] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.148107][T32376] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:07 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:07 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xf0ffffff7f0000) 12:39:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:07 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0x7, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)=0x1) renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x25ec02) rmdir(&(0x7f0000000080)='./file0\x00') ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:39:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:07 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r6, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r8 = getegid() chown(&(0x7f0000000140)='./file0\x00', r7, r8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@remote, 0x4e20, 0x0, 0x4e20, 0x8000, 0x2, 0x80, 0x80, 0x88, 0x0, r7}, {0x4, 0x1, 0xffffffffffff8001, 0x4, 0x4, 0x6, 0x5, 0x401}, {0x0, 0x7, 0x9, 0x7}, 0x2aae, 0x6e6bbf, 0x0, 0x1, 0x2, 0x97c7bc63fff39750}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@broadcast, 0x3501, 0x0, 0x3, 0x1f, 0x2ca, 0x1000, 0x800}}, 0xe8) 12:39:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:07 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0x2, "fcd161709da62b3a205c72fe4348b50b66edfabcb6f8890c43112813d3905581", 0x1, 0x9, 0x1000, 0x2, 0xc0ae312373ca3518}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 747.611795][T32392] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) splice(r1, 0x0, r0, 0x0, 0x6, 0x1) writev(0xffffffffffffffff, &(0x7f0000002580)=[{&(0x7f0000000200)="7593fa127ccf57dea40406896bb2dca2dd9e3404f2e8d722b196399bd9fdcdef53891e7a7f8ba59cb8c504f1a616f5fdce3dd4b600cb1bd8169381f4530502090e9c18c2d9098c5b1e018f135cb69803db7144b1b4c84118cee146095b5784809e3a8b871b5fc130ddf7e49991ebe06a224b5cde89eea68b59c9", 0x7a}, {&(0x7f00000002c0)="673effe98d4fc0232821524bbce655ffbcb12d1e7c54530e522d93c52cbe4782630359541391f6d40fd4b96900ee7caa9d378c773d25124b7ba3764ca1c5fb2d1c71d212566ab4e840c0849ffb2c254dd65e3f7c70ae472d06f02909bf80e823a56b040ab1e18370bdcd8af9d6951a32a45874554129a19378cd6f61b3f1153bf23e67ca35d4899e031746aadb8b6a81701d2d975e5b792fc3176940d96fef208caa75549b8ba579c2eb0e063da4e6b1376f6b8861f978b14f06c30943d0146ed8bc98355c9cfc253cedbac65e6033b19e42c6baffb30592779cea9586f916446d854e132c2a272466370cae81a2eaeab8de6a61759906202635d23118c60eeaac155b8933a22df359e86fa791a17fd85b00b7c9615f3179041983f865695e657d623de08428fbe7b624882c8f91855fb07a10810b166cb651668af1ad9d1cace4be1f480a651fd5cee34b883ae498c0a258bbdbb2ba667c0f3c6d9c31ac073ff8a9243b792fa907c5e7b2c269ed86c5054193c07441e887b7b1f2a40ce21c7642748226593dd6358015b1218fef11a0070f2cecfea56558c83a804509b7251a8c5f153d2dc8159349f6b945033a10791afca1634797c4d24886259528937479e6c57037be9a5cec1a677907b640b5572b85ca49c2b6f1f4d7e8ca21c73efbdde618b759b41230d4e95540ee9c1065c8200f62ed47311c10fc89e8a3e71d7be7b7a732f37fef1991c6c2ed98360a6d25dfaae4995de9a2f80e32ff022986f485da650f53e124383b055f37858778c514fd803dae2436dcc328cff36a7299ecdde431184a0d9331cc78824481d6462f088c4fe16ba5e9ee0e7c5a3d1463f813ffffa141492a72de8e9d61872a8286acc3f125c8a18fcc3efb3559acdf80b16feac85e95a6516b16f75b711af393888cb9aeceebc04c6b8951d8f66152e68b1d2d12da218357b28da6194dd97c722e04fb79ccdb86ec75f51b8372ff79c6eb5eb5e41f065345cb0782a0d380fc2a42c519d15b1ab160602ed5b989c92cf9cc7ca795924fff1d4b54f50c1e92a6ad32c06bfa14b016b42e42f4eb53961a5e8c30f1739664fe79edaadffb0a8f2647ceceb357233093ecf8a168988acc30694a7845e177df41355a0fdfe6c9f85d635c3893c8a11f0f07e7b6b0d7eff5be7f9dbd339a4c946ad94c5b43fa357d750d5d84a5bc4e938ee413b358014bb35d48e430dc1de7d8140dd2dd48f6ec01ceb5e3d16f00b66aa3a85cebe2a82159ed94e0ec29262f054dc98ab3f420bd853c7006102065d8e0a1bdbe21685ee663c891b0347178ce16f6256b415834237f9c377f4bbf86ceb5d43dbd2e9ce386e90a28796efda49d0755b5957dbb03363568674db063f777df7a942d52bf3393788cdf47b9078d548174ef3695aeea6bab591c0a6d83b7c27f4da583a41d2f8c649b5dd34d4dcb1052dedecac18beaa59999556e054bed15f9ab953ec0f266219fb7babc47b579c75aef2e49e4bbd0119183711ea2a4cbacc1a2f7274ee7c7b1eac09c5e3a1fac7ffad42137bba00618de91cee466dd42fc39db9bf55c57cde3d8659288453b4cee41137efda57a1aefe3ea67b6091086028136feb0caeb7bf5ee2a55aa69acd40f094cc8e097f041e0a6e1665af5e9aa64de2a83a64ddcc41328f8d55de4f5517d23ed34ef8b9aeaa268390ec0b8c0c05a39bbe0137abeb27237e3944b7f4a60c817e0471b4cccfe6bb16c91d53d5f226d3f9621f391b214af15b61ad73878c28d1e30e6aa25ae314e860c156c0167d67914cde079876da54cbe91e43a387f5ed845d6003229bd6a0909d6ca62cec619a7963e53d4e645fee91f5f84b324ea6af4683f779dc060c6e61dcaf97fd519109479ba4f5c1f9e459a3e8b4fedc638371bacdeed4c1d5a065a5798f25cca34335d95af02642ba7f39c333c1dffd6d974a6fbb3c946d457625c092033613c9c5f7c822e0b1f663d04e6204d34e0fceb886643b7900e8fb1b4745351878e3e314df31e10337f906fe0369e257f238d8f363eceb776dfea4811418835555902a043e40c0800e8478de59e00b11d3f9cd6a8986f478dbd5c70aab441edc666ba7f00cb6cbf3d33fdf4ed5858464d7dfe638e28ba0820d4e8b1709aec86bc2af79d51a22edcee08128395941617bc49dd7a35ec70393921d1bc9024e8f51130f9be4d13ad83932ecf0d4454143250385f736320fc4cd4d08fea7b335286ad35171c614a6ffc6cca5df4f43e73fd12b387626d910868f1e40b0a09f0f35b95bc717dfab668516191694ce76af5b46b40a99544853b747ac3ef154c8c3688ab234ac4ee6e5290f189393a780213c3dc7b16b663b96cb078f0db364f9569916bd684c79749083bdedff557629f34f0b0c1adeab147c74047ee1f9688bec76d0ae601cf8c701a6aacd236b72beaa71bbe9b954f8e85f78a05a562627cc8886767275023d92ace6ef758a9d76698df969830128f8e0a17349fd4243ed5943abea04267a9c86c523daf6eb1acc59892c1e3a020481a758f63cc7aa2fc26fdcd25d8750a9dd46fa8504db3e0842fc8077d40907b5a8764f4f49edffbcd79f6c0a5078e9782e0a3b61e406583a49a91e96c5de5aed9a9807b55a791788e427a4a8869131a5ddc825fe8e17951b056c782d795ce3bcf56408c69848b4fd456f141bf173a06c23ddac48f486108eeff6becba3bcf0db5b857adc92eb1e9ff2196cc0d43b294264adc74bb0d978f20d08e21b97f310ebbe24328f687fb3afbb1b938274d7af6e14747f7c9a472961233bbfae56de0bf75768723e3b1812a9914350adb7cfa37f4cb11b403aa6ce366499d16bc486312d98a1ce15f7c870a5d4bbaea6624d7615f82ac1a4bb33044047474bab9e12dd19ee89624c81d9ab7c3ee4ecde81be541642d277d904b1307879b26aeeb65744cb33644b6360da9248a3970b6cee3fb0f7b26f32331279bd4e926d13c0d2306f126aa9aabd7f32816f33e8617a6975482ff7cd75d695db9150d22589207d2478e504a4cbb9909b336e2d43ebd93078f8d89e303c32098539993286a2392f877ad6ae339279860d84b842251f29af052eb6fff275319938ba6dd3e9493dec0cb1402b85245669f18a19811c3e9b775f1ae09714b948a88f0482266a76ea467f60f3a6783bb718d9488e29f6944a609b7a4aee3c918146cebbba39b28f9e75692b19bae38c2f485a233fcb22f8193cc2baa229357bf3e72de6cfd7faa9a28d2c112a74aed623ad2c7cdc33ce1c4a0e3fd5e0e0301d09b5352e3ad95698b84b034d0e925b18336ae768450238e1613b59825dd05b2ad8fb7808b2318074efef68a9e863e27c3064bdaa97d6090dc4f8bafb993fdd85b46a4d5dc8cd147fa47b79d9d740b3b29e4ffb63b0bf07e6a7cdde462bff29c084ce93765aadcbbfd2382ea14edd8f8620093211289e9102a2090f98e0d995767fde37de5150cbe4f7f9e2c95f07a7cfaab0c19e858881cfdf2db29f084183a27dff1c9f860939b7f85b1c0054afeb41815d7c49e13a86785de6db94d152b1204d29682874e8b248076176d5c05909246c656eadc3967363d99ebb9fb7823f3cfc383a673c11d6caeb3a2880ded4a8adebb796e8f2535a7f8151eb3095a9f1491d5d0e5fa88bd224ea4605873e531e6b351c6ed6619b870e586bca500e19d295cef1915bf2166e0d67a268e2342be652e359914cc450e7f2c2560550d4ba089dbf44b504e1d371a720921299850b7c6f5f5fe67c32a59ba63e0881bcbc5f29c863ceb865162badce3dfc9901ba77628aab2717471d560aa9ff933fe100711091ffdd47c47e4c5f6333111b6a429b9714a8f14d7bb6b2cb255a4029ea86d4de4d9b4c01a3c41ea8fef44802c733d40b144da16d39d361d26a30e133ba4080e1f4c6baf6bed08363a5ffd8cd89d863cc373dd1e1aa4d9412614d262866c8459a926d16c342971cd46f609aeee724dbe8992e8651cb836abd5e2a062acf95881d512cf039bd43694da0fef25591a8d1510a1255db38564cd642b06490e3b3cfd46539e0d69888e12a0c77837575438a3c91de2914c127250e873a2a5d0b1b69a7ea3a11305124cf0a8a8fee773fd573803c3adbb18138bfffbba550680389b5288624947e1155993e53e13145805f07675d235b36fd775f0d0f09877ef6e215924b76133fc9789dcafa99583d2844e2fd5106bd87efaa874a246bfe0cb4aa10114b8ef64f1638db327fa0d42a013b4a876c8d96bfb252dbf550ccc29e3ec66d949fe2e127c7e7af21b4a25f927297c00701fe08dc1f4d618615aeff61ae537dea3c1565a0330b09791a5b3fff776e700545433eb558db18eca39d2329f728a88e56983b15e7c4bd22a5a936067f6f80d9aebea94a1ae7d9e1ab87da8726f46a01ae338a8e50210884dda4274a514cbcf440caa88eaa2f0c45039b23132d0772b738da189040e30deff9b162ab2bdfc4079391d0fa32b48f3e8bec6b2f1cd9c6bc9d89493b5a1d1ad4ea01aad7a65698205da2836aefaceca786bfab9153aa31ad364ec4a72903d55c64b17279a312c8688595076ff42a50908d409eb901d25d80ac95bbb269c31c2e7ab68e9791c0268f70ab657281bbd47160783290d6505502fb3b460bd5ddf0aa334d65c448a628f84fb6fa28351de2591147e24092f3a86206ef45dd4a5bacd4c926ca69a439ea82933d62e166f5d63ec35a851a764c4ccda08144d279678417d0eb9fea6dcb33cccc07f574f959a7275396dcf047004185a069a5581aae5b7fd17445546f8ac0a13f702534dbe43369d203cc9e0296e74f61578deb25b6f36bb59e7a0a3808e00be5cf3bd413bb905c09ffec2240b3fd153483db8e4dabf2202d7e31fcd7ee3ad0def364718196e35d955e929e8b663afd6a3e891be3c0d6e91f1a2520d4dde6d38b5f6385ce4e125c869f0e7d951ccab2a296c56884b324eb107bc7de8e855299bb88573ceb29c2d7d3cb2e821156e8bca4052976c81afa2862a1cdb2efedc7a2364662337324eb0fa3cacc5ca66e48647e62e6b3a0d2e8ece279850a9585e10968c4673577d1a5c130c7337f13c45b3611898c791a322845dfa7848645b0c3a95b47310735456cd4d49379deb0cb6fc3bfad2fbd5c987b5bd9b3295f8817174383b935c4a58c24611ec0d5f3a7dd750cb69510583fe55d4dc501f3340c82ac2c92900cd6c63e93a708e8b87132e08746a420e513a8c0de45f540065b91d18dabc3dddde666178dada8080558f131efd9145981c4929a2bb0f1cc98f3eb386a7bc802cd234af015da74422d522847951fbd93efa478dc3e0c0df94a2a5d59145e547391081d13e1b0c78baad4a85531f01304b3a149f60eace98ea2c4e8b977466f27700923a4c270d80e43116d218afde0fafd9b4748714fb116347f7f7ec6cdf975c2eaee0173763d812296ecf3069daf1476d0f894002087cf5ec54f3a43cbe176fc0e34feb398be02385ad69ac3cee4914316e525ef90224a67c284d9b3af8aa9d564db4ef19ca3bbf3cc4330791e32d98680205250fd97d93a8a3d9250083a2986775e062420a84a2c797049505cbde762864e4a567492a8d3163c66bd434ea995de6d4ff821dcd2305d6bd3673e056935e894c1976f11fd5c64e3b1d31f59398e5da8d603fdb4be6aab9ac287cbd355fde2ea4e6bdb78fe4c656b18538aeee96803600928380bfa1b9aee5a6e48e22ff1eea41f341f3f098872c2d32600f3877645483d53940b7c1d3e3b13b6e184e84363d9fa8dd18b0d2f17ff4", 0xfff}, {&(0x7f00000012c0)="d4480cbd959a507eecf93c98c3a316964ceee579e02fc93f1f55fa11c3f8cc215f65161fabb7bd3fba641601c37f6f7d11afdc4292f17164a8bc528489e4d0a0546c4b63bc035935aee971e20cd4e2202716d7647c42be40628c699523439d1e29a0efe51c", 0x65}, {&(0x7f00000001c0)="4c9c61e5e88d87191c6a23a43d2ab93eefe90002000000000000004c4ff1676a3513b281fe30cdea2d763109062270e865ad6cc4933f0b9e5e4ea098542e", 0x3e}, {&(0x7f0000001380)="f2b080c7783e1ac3a6cf07e66f276e89bc1d50621b8647326eae74b2ddb74c932a63ff7f1043258be99b46991be330613d90fb7e2673e36ff2a5be03cc4218de564b4217f8f55e25ef7abc40d10d44e4f2d781245ad7c7bf63226b016680631ccec17445279b4b2bc3a5a754c18df73fe456094700876959f7ef4421b8e53ffd50213b86f576f9463a2aa4cf8f9981765b2f128e9e122a08885dd05d70b6b8fc3c41f9cda07f65e3fafc6d9a7ab67f96855529e7b2a29937e561f41241178ebafff248d9d3249d39c2df502e21c0ead1ff6b99f6e069cf79b47a7d55c4b87bb4a596538bfb38c68c1e8f6596b079251e69b5103909788a254c9e89dd4d79f7d1f0a05f087a70cfe02d73cd705d3cdbb4b41656fdf0c5d954bb516c5d3423178853f8dd8d274e8ed9159b46dcb4e2dc5b6ca7f6a822ea69260f8c34ae0efc45726cc132c2162b08e83ad11ce667b0e77f2780d8747abf60335ad9141a26a50cc702bffa86fa180d3a9fb9b5ca8ab299d90dee973b9362b97c20573e8c2f4eee371b2f3cb400acb0e5172d4e23505ccbfcb4e00602dca6fc31f429c12406902b04f71ad1cc3c83b80f97aa5dee47b2aafaf02cd981f9cdb2c6f23274d1effd8bb9d73d17fdca64dd075033e52a4fe1bf6cd3afc53959c763ee9e97285cecb65a3b4feb64d58ea30ce50f006862cea5e745f4c5ec4d9dbe3192ad7df57cb55c30e35e2419273bcdf7f9a25d4e6520e06a6835985db18d04549f8182e019d3194035e96300c7e0fc9abc75e26744c2b165d5c9b68546224a922bf73e3c36c2d1441576b95d7a8e0b77f03f2bf65eb9a66005afef8f39e5bb6b32a279c006632262da30a84850b29582070261bf8342952fc8e55322160d424b7ce8136c9381d646c33c0d6da77fb9eda21866f059705fb02bc716ae6227e31ba28bd5301b65683b2247f7f7fff73bccebacb16992314a741edb783e2ca303421b3103abc36faace78bb6472011c44f8766c9987355fe63d6f0fe184178434bdd5f794559e108fdf108e0e36bab0520d9e184266b7f66d2db56a627a03e8b8ac9443df5ed91986a22486ee928ccd02a22b8f1a176f3235f2b539870ccccad505dc5b976f8f7cae9a695b7e7230d62a3d177fd2b001d9beeb40a08259e031af754e36f3372cfc3d650b6c1c42807fe8d6b0bb5dd5ecafe8f0aecb87f367f21830c38fc80844d7b17851a60ff80aaab59c98a56fe91d433fd617f186a638168cea3d586fbff4a6591d82c0c2e049649b1b60172ff021765e31b26b33b59091e9dffc2e4c15ff55b5d21cedfad8c58e2fcc5573a7bb98cb4ce863a2206c72be586e26c5c0cb90373d1176ddd6fe3944b13ee2d5e6ce35760884db66539f0563d5c119cdaa25b6834d1d589f4b9584c43419d40245b8a5fadc8b93f094111261ac8402c7da666c48227124cf3c2eb786a0c8443fa0cea58bc3809250606f8c5a80c8945e03ec076dbdeecaf25184d730a7dd550f40c1bf713c1b6e1920b7ccf83918dbaea82e9cb833f93a2b0458e8843d95854f9f5606d2e4835ad0586adf3fb07b832eb0d98b48e0cb4ed3e5af2f34e912d321dd2e2825411aaeea04c1850efe551d1b8688bc378374c07af14e8635b0485f1fc0b381a50c2ee63846090393f7c7129f5466b2f3bb74a86cc8ad439b09d91e2825aacfa5b6bb810c7c33be81f9616ece34ae1fbb2e27180beb701f07405f718785430d256606f6c900ec0c7b8f2d27f6427a4f0cbcccc1e8d4fa1fbf5178da7fbd0496163378e56e4eaebc68e0d7a5aa33611d0e36fed38be893084e2d9830b3306c98b7bc404d9c0e68d2bbc9bcf947ea643d505a3c3cf7c2618bd153f6342ee5384bedaa2dfdab7769090bee7dd4ea65ded24e504ca97c4fdb681f05d7311e15602509e5e8649ca60740a130d2d865ad796f8d74080a4863e537e2e1db0a9e46200bc03b9505d6dfb1790439c66d6a906dabd7bfab752c5d3597af4c16d4efcc87627a23c31442d3d27f36abfe7f5357edb0bf0b189a037bc688ec6aa882707440169ae3693f2f5f2fa05ccccd69e7316a82801e0862910486dd731d9107deb852f15e9245189fb22387abf17eb8e04779ea6743e9c7b9aa4a51a797f04557e663f0ae3d6f37f49e648c089e4ea72695bd594ce85065e047143cec35364b4c66cc2c6af699a1f3f85a5260bd545ef17ec0a4d5c8331e239b47ad83f9ac92e01520da45d535a38f97c8c561926cc3df549bbb990b02cd4840fc2d3d25c2801aa20ad9aed9e43d3e8d623c14a3089e0b8582a8477b09b8a1cb5d8ee169741179335204330e07586ab7ef40b8ab76390e8b4d8ec9ae0588565bb6e120e28fd6ae2c4fdee7f32dc495e4292dd0c828c57c1e694095745def199bbb56bdcb304d1ea95dbf944265e9f36d5a053968eed633490088f666323d24de8f648a6e9fee4716598fc49acdf266528a94dcc93bad8e67748974d252bf09ee395937f4519e7994c81ef7952a220dc2aede496eaa9099bd9956ab23e6db00a1e20096e1bd76ccd1646310076a5ce1130595354ea4057ffb85875a910fa58c64176292c02edce3358ce60bdcbffd1f10a7c33db021a2d45a652d9712961e788ab68716d96dec81e3eab1ef11f1711cf6fd640e15ca6cb37bbf1810acad7025d196b06aacd4bbcf781d396488c8a6c6099d18589e62bcfcdd70a35e704afe1bcc43c093aee0a41f46d63b39f7acb000bf64c2d09eb6793b8dfe9e2f349caa14704c4833a8fa46dbdc4473257ed9fa9621db5c868fa495fa9819eb349d4cae4cd9a53de615738c1c5455c0c38c6b091cd657949e50dc097fb4c1314f6f0ffa509be93ae1f39e2b7916c9efac38e79593db6e6f043573a4f5664488290f302d9dd34b9a48f1f11a05d9d4343a1562153b30423fcc634ba5a73754e4811969fb6168f179b3c75682bdd1ece319a0a9ae57b0ebc35310790f235d1ff329f5a378a769624f5b2df57889374b136b07498abddc16be26658094813f3d369a3f77d1b93033e99a456017d37fa82a0fa94da1688023f76ebe0bc6398f1cf30298a7ec410eb72012043042d11cb8b6799413da96e492a4530072bff8ba0270463cc5f5f1fceda2e7931ed11b4567ac771472da3876ad61ec3b4706cb5d858cee2f367ac5f3b0bdc5fba01dc94d9c4cf93cf6b7663c195de85d4f81186ae21e6fc815c264d3b878762d268a35cf93a9247d34a5de79c9ba0309b81b4ae3565f640a2800304e322b3b3483924e5326d9cb8ff8249af8d9840236c825630561cb9a6d5287f4cb94ccae6c5292bb01c7187f4f0bd04eecfdce42ee74e4ea325b61b66c5fb39c910922b7a5aef2a3ec7c17895317b13a5647abbd05bd8f36228ef73751e34a2ca0ddada0e3dc4d66e6a24d3d049c59e5bfc668373e4adf12580703bb1e4fda057fe2b6b79c9aeefbc67628cfc195c6fce9d1f4d033a7059d364a50c80fb38b654c6ca97ec1ecf4a2e26cf18238ade1ebee61fcb7b200d24cda5e7759258497accf27170ec1f6167ee897e914b6d5fd84630c085b28b79dfa3af1fbbd443b1184a9fdad0bc8016ec8eea51b161b791682c99688172da66217346dc3dec12848162bc2fc63fd4f93f78e567bdd3d05be220cabb8bbdfca7e2a673e5b76183d44fd3f35c09a75c3e47ab8c5245806766f5d4c5f331d8a76d1477c3316878f495c6c3726dec2e019eefab321089a9d02f38f0a000d582b49a458e874a626b981b58486f08f9caf20c3680a56c80d99671e7b6edfaa10eb888384bacb2366a700fdc1d738792f8dc108b1ff3c21a365cca78af14235c731acbd4c1bb99f1d73393d2f5e382c22c6ab303ce94ab557129971687c0a920efe556e33df180631f90966121fd8fb4118cad351f4056d20a7c6ec18d0c695d5198830a69adc9981bba3170b3b831e0d8b6b89bab3f06a90d11fd1f6164e51ad7e88fa29cb5feb58db106b126f6c7e1b35fec1a77ee1e4d7509b60bfc48daf37aa031af17d1a44aa14b7cab2d2c971b45cfc93ccc7b437976dcfa381179c1e1de9f7db4f5cd734ed6ec8db4316c5d5604415aca0da265793bc3528d635f229e77bfb64d150128512c39e3242c1363b42dcbd97f77ec240361ede1bad5e0af3c565d583c8cad5f1365f215bea0f3b8d16627e43854cd24a7372784eeabea67b67a472ab3a0c60f28d031969389314f9db75234fa9c93243f3342474937609f632e055e253cbe081063a5cc5114629aa76ea4bbb55d52d560bcd52ef26d887103a8cf8dd2b59f8c08b7081cc6cfa867e32700883f61dc2ab5a17829f01dc2f5452b49008c00403b979445d841d62c0cc129a722adc95bce12305bdfc5a746b24301b074b9c06f63b0a5be8482fe7db9b712ec1810388662ffb80113b2ebedb25996cf9f7cdbdc3717cd27f544d7ec4a8e71f57bfcaf478ed5067844ba5d99edc0206a62ce00d9e0419bb044c5498315526360ff3f228ccf0c31781c13fed7af11b0d5ae8ff36da39587363db5be31ea569894a4f3c8def2ef8accf7fa8494359178c34c5c0b8625adabccee486109c685c81936d5f5c15fa908ff6a97438a16c25251a7b381e6f59fd74eaa9fa8406a6a652a3beecaa94ed1b6d59d734f0f03a96fe6ed07620f994fe0bcb13c65e52b79efb94a9dc677a9b2658170bbdae2f4dafde2d559fb0bde01e9354b1fe3909521bfee5cdf10bb95acb13b5c50027f5cecb6809a60af59beeda2d6ccf1b326fad3cfbee5940a27316e2d0480018f57cb1b5f95e681cdf21e8ea9e981c76b1dde8b104f5b3aabe2853429ba4756a9ccf72266f19808a29dfd1c960d296ba1157b91201c84eabc2f27555b41cc410e14869002a5100700c6c77057ae23493095e2f4d17a126b0b36d71a62717e5f2f7013b8e606499ac14c2dc9cc08812956d1ea39d2c39d4a0e710f6160fe5a519793983e358e565bd72e227bd2fc2386bab74e449e2bd11fafa5ea578db9098070577cc0c7cd66b88c29bca4d3dc943e7707d079c1442f41d486a6c067659b5d26cdaba5c10a7cfb63c5a079e40c24f9fd1a80bc3d22ed71ed2f3b0154307e82808303c3271e03899d28dbf9528d9c70c2ad26bb917235e7b374ba6bb2d1c92a8a343aa3934d81ab23862ff86639db4fa9e74af21bd7c5485df8b7bff6d3e99f9a6062f9d410db5b7ad77a2989f1fc1d72b68e10d999af515470a03d6865c2c0b263688d5194c6554a1fdfcd13efd4cabec7db997c2ab5588d73b68f816b610f26e2ef89b460e6fe47324e944257c6563b7a0e95ae5202f8d25021243200b2dec344921aa445919e23eec29b21b5b393e4bcf60baf24cd88d8a62a53f3ff00126e59c8ff1a3cbbc47d434b719dcb7eb7b25aae15556cb13f977f093771dbc718c2ac99594d1da03ac7fa24429d55be0c56ed5373bef7d062ccb37ea9795e93688413ecd30dd4e66f68e2bf025ffec016c2fafd78fd52fcde22dc0a82dee000eb7fd64686a28e8997f75cc4ab28641e3f1fa5ae1a6cedeb5812cd389579e6f5a632aec238d4f121c0442bfaa0f541e3cd303f8212d820fffc0710843b54e6520e9ccf93449173fa5ebb135e5314356785e7bd37284c3738c07c8b8dfcd193f1542289d32b2f52ac834aabf260790332dc2d057dffc90fab92d0dc76785e89be601322ac7587366ab586df6cb7216b7c63f44ee5c22739205dbd5b341decfdf6b1b86b4cf8b0cf3bce5fa0167202273830b8514eaa792ca7b6fb546dade31c1a9e37d613841baef7827bb538d54ff3052", 0x1000}, {&(0x7f0000002380)="67c1cda67aebbd76b9540f7a7459fff2b98f21553b780ef3f51a59cd55e2fc2588b0edef49615533a3ccb597f306e4fbbb536541b78f7ef70ee6f632e87e3505007dad1c05e2e9e2d2c00c3c1350ccb4b6f24d9e94f2dc3472ca1aed0f2c0b35aff6bb2731eef8f3d4ed173c4744043f2b930ebba8d14d309e6c8f15724abb38b34b6d75bbdc3658f1124ed6fe1ba1250da75cdd26c46ac73f436ace3ab3b6d7bff02f4aafa8c026bf93452a2cd4c9fff4210a45b167a5af5f06a4a972126a143760f3697cf26371cd52cf42c2ed", 0xce}, {&(0x7f0000002480)="766ed9e7a7d9d18480db1b8a58983f4b9136617b942063f97ed63366f2397db031b602afee949f8a005b9624618366bc1e62e97c9e29cd97ad602d1c8628cd78ab1be788b8d7e729d4af49b9bf2860adacdbf9e3c5dbb432340a5bf43a7e8c172b7ca9361e950c4d7f83a11319b0c551111f783a2e80116f2ba368bf1348ca99d257b1c985852e0ca81cec02822503f0a67054ca5f29c7cb07b35175506bd9668c44221dbf1ae918d4da18a976f3dbce01c2db9dd692f65e8c6d9dcc6fae24a2db3307", 0xc3}], 0xfa) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 748.298871][T32432] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:08 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x7a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x100000000000000) 12:39:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:08 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 748.722643][T32448] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x220001, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x82, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e22, 0x54d, @local, 0x1}}, [0x0, 0x5, 0x88d, 0x4, 0xcb5f, 0x0, 0x80000000, 0x9, 0xad0f, 0x5, 0x2, 0x3, 0x9, 0x4, 0x5]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)={r8, 0x800, 0xaf, "ba994c6f9490b8dcb44345c36d8da938907dcfbe44bc4babc90784577da4f1025010f1f4e9fdac71258fe8919e206547e68c44af26cbfc50468023a37ee58ed72be644a9c19a4c168203acb227f63d00a06271d113c2214c1a427ae04422757fbb81531e0d0138cfa611ce4b5958f893c5fea78bc7d3912ca5500c55b7eb7875bfe6cfbc98bf95ceb82ee493990b6909e6476fd621fe38ed323e01006a69be318810e6f10f0744a5605dc69650759f"}, 0xb7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r11, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x200000) r12 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r12, 0xd, &(0x7f0000000340)=""/149) shmctl$IPC_RMID(r12, 0x0) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000000080)=0x10001) 12:39:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x200000000000000) 12:39:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 749.320345][T32462] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 749.505417][T32487] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 749.794523][T32469] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:09 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xae, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x300000000000000) 12:39:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:09 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x43, &(0x7f00000000c0)="d1e6b04f83f9aa83ba3f0b024ae48d778030a6df5e272b282d06e3c7daa2c3b1b5fd39e8d4171886fdf11b7d551259678529efabb3d3cdb5f9f46ec96345fce96e49d294d9810774f9") 12:39:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x7fff, 0x0, 0x1, 0x4, 0x7, 0x50ba6b28, 0xb5, 0x7, 0x6, 0x1, 0x497, 0x1, 0xb440, 0x7f, 0x10, 0x2}}) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r11}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r13}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r13}}, 0x48) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r15}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r17}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r17}}, 0x48) write$binfmt_elf64(r8, &(0x7f0000001480)=ANY=[@ANYRESOCT=r11, @ANYPTR=&(0x7f0000001380)=ANY=[@ANYRESHEX], @ANYRES64=r12, @ANYPTR=&(0x7f0000001440)=ANY=[@ANYPTR=&(0x7f00000013c0)=ANY=[@ANYPTR, @ANYRES64, @ANYRESHEX=r15, @ANYPTR, @ANYBLOB="87070000009a051c2299cd2bc120", @ANYPTR, @ANYPTR, @ANYRESDEC, @ANYRES32=0x0]], @ANYRES16=r15, @ANYRES16=r17], 0xfffffede) 12:39:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x400000000000000) 12:39:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 750.092143][T32509] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:09 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x500000000000000) [ 750.877971][T32551] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:10 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x7}, 0x28, 0x2) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x600000000000000) 12:39:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:10 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xda, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x32, 0x505000) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r8 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=r9) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000001c0)=r9) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r10, 0x0, 0x9, 0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r12}}, 0x48) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0x0) 12:39:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:11 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0xd6c5137818fc200b}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000100767469000100020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9743947e54a764cb, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf5, r7, 0x1, 0x6a, 0x6, @remote}, 0x14) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x700000000000000) 12:39:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 751.482548][T32584] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xc00000000000000) 12:39:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 752.075305][T32595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 752.272726][T32639] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 752.353762][T32610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:12 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xf0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x3f00000000000000) 12:39:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffff800, 0xce, 0x0, 0x1}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@get={0xe8, 0x13, 0x100, 0x70bd28, 0x25dfdbff, {{'ecb-serpent-sse2\x00'}, [], [], 0xa1617e5bf67f61c9, 0x2000}, [{0x8, 0x1, 0x20}]}, 0xe8}, 0x1, 0x0, 0x0, 0x140c0}, 0x20000090) open_by_handle_at(r6, &(0x7f0000000140)={0x8, 0x8}, 0x681) 12:39:12 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xfffffffe, 0x4, 0x401, 0x1, 0xffffffff}) 12:39:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x0}}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 752.666299][T32652] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:12 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/208, 0xd0) ioctl(r0, 0x40084149, &(0x7f0000000000)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) [ 752.714320][T32662] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x4000000000000000) 12:39:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:12 executing program 5: r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r2, r2}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) keyctl$unlink(0x9, r2, r1) keyctl$set_timeout(0xf, r2, 0xf7f8) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40084149, &(0x7f0000000000)) [ 753.462513][T32694] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.474884][T32697] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:13 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x2b6, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xff2f070000000000) 12:39:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:13 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10240) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 12:39:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)=0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:13 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:39:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0xffffffff00000000) [ 753.960573][T32708] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 754.008318][T32717] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0xc8f9, 0x3f) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 754.732181][T32752] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x300, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3f00}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") accept$inet(r2, &(0x7f0000000440)={0x2, 0x0, @loopback}, &(0x7f0000000480)=0x10) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x9, 0x3, 0x5}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000280)={[], 0x0, 0xa7, 0x0, 0x0, 0x0, 0x109002, 0x4, [], 0xaa}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000100)="f2bbe78ceaa445e42f8263a1b9df573a8f4a2994faa1", &(0x7f0000000180)=""/18, 0x4}, 0x20) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2000000}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 755.339388][T32757] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 755.394192][ T304] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3f000000}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:15 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r6 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000240)={0x20000008}) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r4, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r7) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) [ 756.118171][ T344] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 756.283937][ T343] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:16 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x320, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x1000000000000039, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0x1b, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r5 = memfd_create(&(0x7f0000000080)='wlan1@{\x00', 0x4) fcntl$addseals(r5, 0x409, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 756.598295][ T362] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:16 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:ksm_device_t:s0\x00', 0x22, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x400000) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000000c0)={{0x10000, 0x4000, 0x1e, 0x92, 0x40, 0x1f, 0x8, 0x0, 0x5, 0x0, 0x7, 0x4d}, {0xe000, 0x10000, 0x0, 0x1, 0x0, 0x6, 0x40, 0x1, 0xfc, 0x6f, 0x6, 0x6}, {0x100000, 0x3000, 0x0, 0x20, 0x7, 0x7f, 0x1f, 0xb3, 0x0, 0xf, 0x20, 0x9}, {0x2000, 0x10000, 0xa, 0x0, 0x7c, 0xfc, 0x0, 0x50, 0x6, 0x80, 0x5, 0x6}, {0x1000, 0x10000, 0x0, 0x6, 0x4, 0x7, 0xff, 0x5, 0x1, 0x1f, 0xe5, 0xa5}, {0x100000, 0x4, 0x10, 0x0, 0x0, 0x1, 0xf7, 0x7f, 0x1, 0x81, 0x3f, 0x68}, {0x1, 0x4, 0xe, 0x8, 0x8, 0x40, 0xe1, 0x0, 0x5, 0x0, 0x4, 0x7}, {0x3000, 0x5000, 0x4, 0x7, 0x20, 0x6, 0x2d, 0x7, 0x7, 0x4, 0x0, 0x1f}, {0x3000, 0x5000}, {0x7002, 0x1000}, 0x80040020, 0x0, 0x7a283fc892837ba5, 0x10, 0x4, 0x9401, 0xd000, [0x2, 0x100000000, 0x8, 0x20]}) 12:39:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x2, 0x0, @mcast2}, r1}}, 0x48) 12:39:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x40000) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:16 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 757.190805][ T356] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 757.394286][ T405] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:17 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x388, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3f00, 0x0, @mcast2}, r1}}, 0x48) 12:39:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0xfffffffffffffe7e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:17 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) signalfd(r1, &(0x7f0000000040)={0xffffffffffffff50}, 0x8) 12:39:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000280)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x2de, 0x100, 0x4, 0xdae2, 0x3, 0x77e, 0x1, 0x2, 0x8, 0x4, 0x100000001, 0xfffffffffffffff9, 0x4, 0x1, 0x5, 0x9], 0x1, 0x4000}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) 12:39:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 757.852039][ T413] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 757.879187][ T421] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000200)={0x7fffffff, "5eaed6fbad4d45f0f9f9bf556a00ede27ffcfe355ec28f35773f6c797374cfca", 0x0, 0x1}) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', r6}) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r5, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x5, 0x0, 0x3, 0x1, 0x4, 0x6}, 0x20) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r7, 0x40084149, &(0x7f00000000c0)="69d2867d643db72f227c4cd80652e856cd25b36a4aca123728dba03b310f1c508782f5217d76bc1fa1b193ba69307180baa0caac6c84faf5d38d78575eb20e387f2dbbf3f17fd32f7b222f193108d11a1d248693543b64651bc0470bdf275874c03b86423baabe8ded3b68f21e3f67f86058839beb646bddd68ebc4181f3bca6f20d78525d4810cbf310630c852e9a0b2fedc81a093bb42718fb164179c1051e848040107ce09eceed08dd2e971f80af2b2fbc26b8a0fe2d4f3be6543ba955f5fd2556368e17df1534e643becf22f8491e3486920febcf524b8f89b1") ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000240)={0x4, 0x93c, 0x7ff}) 12:39:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0xf8}, &(0x7f00000001c0)=0x8) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 12:39:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x2, @mcast2}, r1}}, 0x48) 12:39:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 758.626594][ T478] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 758.740305][ T435] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:18 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3d2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000080)={0x2c, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x3, 'ovf\x00', 0x26, 0x4, 0x4e}, 0x2c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:18 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x6}, 0xf) acct(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x3, 0x210001) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000380)={0x8f, 0x864d, 0x4, @local, 'ip6_vti0\x00'}) ioctl(r0, 0x40084149, &(0x7f0000000140)="2aec1683a9dc058184e42f9d1283df50652c4c817c82c369becc5e092b502397dcb1abc45cb082e51ddb87019513b3ea636578b8955e47601ed10de12b80b4808d0f028c5527b7b1424809c9bc216f4db48d12b201bdd41f7fb4724abe94559ea00e08f18beb95af96e5a650dd494f8de250543a009de857eb6b6a0f4f32a3b5147195ab596f5b34e378777c95b361f3d90277571af1b73df0b49ca0c04795f515c592ecb88afea9eaa0b25908591ddb921e03c298fa4d622f60817c0e84e7bab6217743edad78a4cb50dae98e8acc9d02ed49574dcae5e0a9cb4d1b7d6c436904509b3b1f075fdfee04200000f089693d51950b4404f62d964cc20d03bb2d0b806fe42b5220e19eb433136e00"/279) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) 12:39:18 executing program 4: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x401) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x167, 0xfa00, {{0x2, 0x0, 0x1, @rand_addr="04d80adce20f9259329568b6080100ec", 0x10001}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}, 0x9}, r1}}, 0x48) fdatasync(r0) pipe2(&(0x7f0000000080), 0x180000) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x3f00, @mcast2}, r1}}, 0x48) 12:39:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x2000000, @mcast2}, r1}}, 0x48) 12:39:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 759.071489][ T486] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 759.100164][ T503] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:18 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1000) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x3f000000, @mcast2}, r1}}, 0x48) 12:39:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x28911ec3245d4dc3) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 759.857611][ T546] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:19 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3e2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:19 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x7ff, 0x4}]}, 0xc, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)=@ax25={{}, [@null, @rose, @null, @bcast, @default, @remote, @default, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/211, 0xd3}], 0x5, &(0x7f0000000580)=""/60, 0x3c}, 0x20) 12:39:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) 12:39:19 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = socket$packet(0x11, 0x2, 0x300) r5 = accept4(r4, 0x0, 0x0, 0x400) splice(r0, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 12:39:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) read$char_usb(r8, &(0x7f00000001c0)=""/188, 0xbc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:19 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) fsetxattr$security_smack_transmute(r1, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x401) 12:39:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 760.355151][ T565] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x2]}}, r1}}, 0x48) 12:39:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) r3 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r3, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r6, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r8 = getegid() chown(&(0x7f0000000140)='./file0\x00', r7, r8) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r10}, 0x14) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r9, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r12}}, 0x48) fstat(r11, &(0x7f0000000440)) r13 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r13, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r15 = getegid() chown(&(0x7f0000000140)='./file0\x00', r14, r15) fstat(r0, &(0x7f00000004c0)) r16 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r16, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r18 = getegid() chown(&(0x7f0000000140)='./file0\x00', r17, r18) 12:39:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 760.945434][ T554] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 761.143260][ T614] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:21 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3f2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x11, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8001, @local, 0x68}, @in={0x2, 0x4e23, @loopback}}}, 0x118) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:39:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x401, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00012d18c7f2dc9f121e5e0000000800020006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r7, 0x420, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r8, 0x0, 0x1420000a77, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xeb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1001}, 0xee266d336045232c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 761.492699][ T618] vivid-003: ================= START STATUS ================= [ 761.500504][ T618] v4l2-ctrls: vivid-003: Test Pattern: 75% Colorbar 12:39:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x2]}}, r1}}, 0x48) 12:39:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 761.544354][ T632] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 761.566880][ T618] v4l2-ctrls: vivid-003: Fill Percentage of Frame: 100 [ 761.582093][ T618] v4l2-ctrls: vivid-003: Horizontal Movement: No Movement [ 761.614689][ T618] v4l2-ctrls: vivid-003: Vertical Movement: No Movement [ 761.649671][ T618] v4l2-ctrls: vivid-003: OSD Text Mode: All 12:39:21 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x1000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r3, 0xd0, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x7fff}, @in6={0xa, 0x4e21, 0xd70f, @dev={0xfe, 0x80, [], 0x2b}, 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x7cc, @dev={0xfe, 0x80, [], 0x22}, 0xffffff7f}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x10, @loopback, 0xcd9}]}, &(0x7f0000000240)=0x10) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 761.692133][ T618] v4l2-ctrls: vivid-003: Show Border: false [ 761.705462][ T618] v4l2-ctrls: vivid-003: Show Square: false 12:39:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 761.732745][ T618] v4l2-ctrls: vivid-003: Sensor Flipped Horizontally: false [ 761.751067][ T618] v4l2-ctrls: vivid-003: Sensor Flipped Vertically: false [ 761.762148][ T618] v4l2-ctrls: vivid-003: Insert SAV Code in Image: false 12:39:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 761.804358][ T618] v4l2-ctrls: vivid-003: Insert EAV Code in Image: false [ 761.859254][ T618] v4l2-ctrls: vivid-003: Reduced Framerate: false 12:39:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}}, r1}}, 0x48) [ 761.913913][ T618] v4l2-ctrls: vivid-003: Enable Capture Cropping: true [ 761.964108][ T618] v4l2-ctrls: vivid-003: Enable Capture Composing: true [ 762.000304][ T618] v4l2-ctrls: vivid-003: Enable Capture Scaler: true [ 762.044622][ T618] v4l2-ctrls: vivid-003: Timestamp Source: End of Frame [ 762.062346][ T618] v4l2-ctrls: vivid-003: Colorspace: sRGB [ 762.068841][ T618] v4l2-ctrls: vivid-003: Transfer Function: Default [ 762.102177][ T618] v4l2-ctrls: vivid-003: Y'CbCr Encoding: Default [ 762.120753][ T618] v4l2-ctrls: vivid-003: HSV Encoding: Hue 0-179 [ 762.133477][ T618] v4l2-ctrls: vivid-003: Quantization: Default [ 762.161193][ T618] v4l2-ctrls: vivid-003: Apply Alpha To Red Only: false [ 762.174510][ T621] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 762.178791][ T618] v4l2-ctrls: vivid-003: Standard Aspect Ratio: 4x3 [ 762.201065][ T618] v4l2-ctrls: vivid-003: DV Timings Signal Mode: Current DV Timings inactive [ 762.227563][ T618] v4l2-ctrls: vivid-003: DV Timings: 640x480p59 inactive [ 762.241692][ T618] v4l2-ctrls: vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 762.258277][ T618] v4l2-ctrls: vivid-003: Maximum EDID Blocks: 2 [ 762.265414][ T618] v4l2-ctrls: vivid-003: Limited RGB Range (16-235): false [ 762.282067][ T618] v4l2-ctrls: vivid-003: Rx RGB Quantization Range: Automatic [ 762.294847][ T618] v4l2-ctrls: vivid-003: Power Present: 0x00000001 [ 762.301393][ T618] tpg source WxH: 640x360 (Y'CbCr) [ 762.308190][ T618] tpg field: 1 [ 762.311590][ T618] tpg crop: 640x360@0x0 [ 762.320779][ T618] tpg compose: 640x360@0x0 [ 762.325326][ T618] tpg colorspace: 8 [ 762.329135][ T618] tpg transfer function: 0/2 [ 762.333840][ T618] tpg Y'CbCr encoding: 0/1 [ 762.338252][ T618] tpg quantization: 0/2 [ 762.343125][ T618] tpg RGB range: 0/2 [ 762.347324][ T618] vivid-003: ================== END STATUS ================== [ 762.358656][ T681] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:22 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3f7, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:22 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @remote}, {0x1, @dev={[], 0x12}}, 0xa, {0x2, 0x4e22, @rand_addr=0x63e0}, 'ipddp0\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000040)="c69c5a7e6e9d428219a0dd7e94ac") 12:39:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) signalfd(r1, &(0x7f0000000080)={0x10001}, 0x8) 12:39:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000002c0)="15d6dc33b82752e31dab13fce1f7cff971501f9ecda4e06b62a5bb5fbabeffaaba85a9942060b90138590e87e25363bf81a166bf87e61c97e3a265f0d1bac3a388a48b02bc76b8a6851d55bb46a76bba68539785fc0518da48a324475a3f75edebb6e581fbd06aa09d9a3dde88be7506a068280e0dbf73592a20028b8a258f884dcb67cfe58a", 0x86) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$input_event(r3, &(0x7f0000000200)={{0x0, 0x2710}, 0x0, 0x9, 0x1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffe94, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffffff9a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x1, 0x0, 0xd3, 0x0, 0x40, 0xce, 0x7f, 0x6, 0x2, 0x81, 0x7, 0x4, 0x0, 0x80000001, 0x0, 0x40, 0x0, 0x1, 0x8}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x770}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5c0c}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write(r5, &(0x7f0000000380)="47798d961661d637f838bc9876635185c91c6ba9d7a0d451ba8686b34a7c723f1b425e4be8b200f307670cf686c93aed1b2dac55e0b2409e4274e66df080544cfe2761ba04a63f32d8615d5e6872d8ddffbf77cfd982216ef960b9e408f25636ab8481f8dfefac67777c0a222a2185ecd6a3e266c993be7e3e1785e5c710fc6c60a79bb2914ce0837c2c4b6be784232f410c48a526fb0221980590ad59ea9e48cbc2630c59737e80b4a24e3886473c0f18176d21a2a09b5f243e2b0acafd41accbd5f7a550a926bf4b2f43ac5dcc4e813c78142a", 0xd4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x0) 12:39:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:22 executing program 5: umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000000c0)=""/92) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x301e00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x0, 0xa193, 0x585, 0x10000, 0x8, 0x6, 0x5, 0xa}}) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x5, 0x20000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) fcntl$getflags(r6, 0x40a) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000280)) 12:39:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) signalfd4(r1, &(0x7f0000000080), 0x8, 0x80000) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x7, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x2) [ 762.893654][ T707] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:22 executing program 4: r0 = socket(0x1, 0xc0f670163eb56f5b, 0xbc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x98a40) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000180)='veth0_to_bond\x00') write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, 0x8) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="7dcc5669de8b75981a6bbab92b708186f65a51f9f3dee835d22d3db02e70727d1a0855061ada10246e0910c1a1ea7699151ecf24640719aac392cc9207009e91881336b6e3e496395f6ade116396a03a43abbdda19c3a437944f2b0e9911ee7d7378536cd6f53547462432ef9c3a9116e9a19396effbf9fd996ed2713520d79df8858be7019f76cc48bbbe225d986cc8c5c1796e3f327ae5b906d22fc4e5a2dc8332028410f37b0104fbb2356742788998ec1964c5823ccaa1d7d98ad289f64071b2b7b11e05a71f4b2cb261acea8b5be4acf0f7be030500263f5376c521d49f356d442ceb", 0xe5}], 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000240)={0x1, 0x100, 0x0, {0x7398, 0x6, 0x1ff, 0x8}}) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000380)=""/105) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x249, 0x40000) 12:39:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 763.602486][ T748] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:23 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3fe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:23 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:23 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/devN\x00\x00\x00\x00\x00\x00\x00C#D#c\x00', 0xfffffffffffffffc, 0x2000) ioctl(r0, 0x40084145, &(0x7f0000000000)) 12:39:23 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 764.024345][ T768] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:23 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:39:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x20, 0x4, 0x1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7810700}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x1fd863ba0f0d08fe, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x1c, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'bridge_slave_0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) [ 764.568676][ T754] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 764.788865][ T805] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:24 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x500, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:24 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="e4af4afec61555d5f98ba7317f6c2dec67bae1cfa8b4dc147e230e8d57c5ed65c49e8b394cdda68e530dc25f1415fbd7161e37961be4efaf28f2a56be322c846542483d9f9246bb063d1ed141091285a5c0ed92bbc32f4a8bfa7a24e7c07bbf15169dca830f755451e85f6407561a410cf61690a1c05b55b62927039e616861e15a7", 0xc5881bb4}], 0x1, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x80, 0x0, 0x1}}, 0x14) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:24 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000040)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) [ 765.298982][ T827] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 766.131474][ T872] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:26 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x600, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:26 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r0, 0x5502) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x8, "eb8f2b10c993e43fe5578edaccc8f8834c6080c04f20988ff665d9613624aa67", 0x2, 0x1}) 12:39:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000001c0)=""/99) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffe000/0x1000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$BLKREPORTZONE(r7, 0xc0101282, &(0x7f0000000240)={0x0, 0x3, 0x0, [{0x3, 0x20, 0xfffffffffffffffb, 0xf2, 0x13, 0x3, 0xff}, {0x80000000, 0xfff, 0x8, 0xf8, 0xcc, 0x70, 0x20}, {0x33ea, 0x7, 0x9, 0x2, 0x40, 0x6, 0x1}]}) r8 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$RNDCLEARPOOL(r8, 0x5206, &(0x7f0000000200)=0x1) ioctl$KDDISABIO(r8, 0x4b37) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r8, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r8, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r9, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r9, 0x4) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:26 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084148, &(0x7f0000000000)) [ 766.618025][ T892] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x82, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x8}, &(0x7f0000000200)=0x8) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000480)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/207, 0xcf}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r6, 0x1}, &(0x7f0000000280)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000300)=0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$RTC_WKALM_RD(r13, 0x80287010, &(0x7f00000002c0)) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_END_FF_ERASE(r14, 0x400c55cb, &(0x7f0000000140)={0x1, 0x6, 0x61}) 12:39:26 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) 12:39:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 767.057061][ T919] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 767.267387][ T926] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 767.659352][ T925] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:27 executing program 4: lookup_dcookie(0x5, &(0x7f0000000080)=""/42, 0x2a) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:27 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x700, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:27 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x82, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x3, 0x8, 0x5, 0x20, 0x1, 0xf6, {r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x90f6, 0x10000, 0x400, 0x101, 0x8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r5, 0x3f, 0x8, 0x2}, &(0x7f00000001c0)=0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40084149, &(0x7f0000000000)) 12:39:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 767.858858][ T947] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:27 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x7fff, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40084149, &(0x7f0000000000)) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 12:39:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x407, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="27abcb9466d3") r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r6) r7 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsetxattr$security_capability(r5, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0xffff8000}, {0x3, 0x1}]}, 0x14, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r10, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x10000000000003b6) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:27 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="a9e4f74713e57a438d8e4664ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="ed33e9b8f8ded11896d7fb968b01c2578e15f3da2d5427d8cb234e1f06ea1de263bb87dfc597db3706fd4a09684b6434b9a88b4a1734b9258bc114f81eaa03da17d6b3edad4f22e5e551497e284b4edf6a93801a4d0853ddd53600c380939408974b02b3c54d0fd6fc8f2f720dea748cbd2986ee4071d32d9a711ee54f19340cc329f71f1084c5785f19a1a259fc259f32", 0x91}], 0x1, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x82, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r3, 0x2634}, &(0x7f00000000c0)=0x8) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000180)={0x14, 0x49, 0x2, {0xd2242da57a31561d, 0x2, 0x3}}, 0x14) 12:39:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 768.745371][ T1002] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:29 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x900, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:29 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x4) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) ioctl(r0, 0x40084149, &(0x7f0000000040)="aa3c64b7d09163dd11ac957a1d28e6ff3c164edbe4ca30c95fc5f4f4d8c63cf15ab3a78b902117a04c4caf3a55fb77071f0939747462d2") [ 769.544480][ T1009] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:29 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r1}}, 0x48) 12:39:29 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000040)="dc832c2a740bd4d1ea0294272c1a7417f9623a83") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3f, 0x424203) mq_open(&(0x7f00000002c0)='lo(\x00', 0x40, 0x40, &(0x7f0000000300)={0x1, 0x4, 0x4, 0x4, 0x2, 0x200, 0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x80, 0x7, 0x4, 'queue1\x00', 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e20, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r2}}, 0x48) vmsplice(r1, &(0x7f0000000600), 0x144, 0x1) 12:39:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x0}}, r1}}, 0x48) [ 770.361178][ T1068] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:30 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xa00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:30 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={0x800}, 0x8) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 770.917176][ T1078] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x2}, r1}}, 0x48) 12:39:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r3}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) keyctl$unlink(0x9, r3, r2) keyctl$link(0x8, r0, r2) socket$packet(0x11, 0x3, 0x300) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) ioctl(r5, 0x40084149, &(0x7f0000000400)="c868da12c084287583d686caac38c3f2d8a454e29892fe716ea98d501d440624102d56019296b0db6f22366782ae2c33cf4763219185") r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="7b21d7125fce609f96783de4ba497f37e8ea520668ba53b6a8045a71c4db8cab1a07cc9ab1a3a3715112d0ec0f1decd8be1b45724c76c213dd52b3dee5ff25409b4688c1cb9ba0b5251411a73aab7b669c9eca51eb458e", 0x57}, {&(0x7f0000000240)="7205368a5e2f1535bb929088a790b6725cc4ca6f74679ef1aad0a3a37626991acba141de41dbacc149174bb1d52612a5dc1857a7f6f16090fb294e97ffb23df6cfa57a9cb2c1fc1572e2a102ef92ab520f96f84dc7373410ccf993171108", 0x5e}], 0x2}, 0x8051) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8}, 0x14) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r7, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x7fff, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x244, 0x0, 0x0, 0x0, 0xff5c, 0x0, 0x40, 0x5}) 12:39:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x3f00}, r1}}, 0x48) 12:39:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x2000000}, r1}}, 0x48) [ 771.442052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 771.442083][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.447899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 771.453638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.465082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.470931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.476760][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 771.522040][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 771.527921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 771.533794][ C1] protocol 88fb is buggy, dev hsr_slave_0 12:39:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 771.724984][ T1128] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:31 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xc00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x3f000000}, r1}}, 0x48) 12:39:32 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev+snd\x11pY\xfc\x9d\x15\v\xab\xe2:', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e21, 0x0, @rand_addr="9b1793f829da0379545ee166eafd47d2"}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r9) accept4(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x80, 0x40400) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r10) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 772.475128][ T1138] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x2}}, 0x48) 12:39:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x3f00}}, 0x48) 12:39:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x2000000}}, 0x48) 12:39:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x3f000000}}, 0x48) [ 773.347676][ T1201] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:33 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xe00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x7) 12:39:33 executing program 5: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6_vti0\x00'}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 774.017022][ T1217] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x20000088) 12:39:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1, 0x80}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}}, r1, 0xff}}, 0xfffffffffffffd83) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0xdd, 0x5, 0x8, &(0x7f0000ffc000/0x2000)=nil, 0xffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0x2, 0x4e20, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) fcntl$setflags(r0, 0x2, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:39:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:34 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:34 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8000, &(0x7f00000000c0)="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") [ 774.803985][ T1264] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:34 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xf3b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f7f5932956895d51a47ec", 0x1}, {0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x29}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0x2, 0x0, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}}}, 0x48) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpgrp(r6) r8 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r8, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r10 = getegid() chown(&(0x7f0000000140)='./file0\x00', r9, r10) r11 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r11, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f0000001640)) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r13 = getegid() chown(&(0x7f0000000140)='./file0\x00', r12, r13) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @loopback}, r15}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r15}}, 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000180)="572b20314a224cdd656084305060841239185184f52214fa22a372d9401b16117bcd41e58484cd1c4acc689598a03586c7c1f3687e52172288207644f87ed7f6cc53f7f13563b9ab6c5d42b0dbb4ca688fc84db88dd43e95200147197f12b0802f543c6074c825c711932ad7e46f66dbb3dbe4af", 0x74}, {&(0x7f00000002c0)="eaac37f9c5984b9b8b0c4fd2b8af65fefb5eb458b16940691d0555144bdef8ae3143ae2f130966a0e760a1b5db0104a982598ca1140dcbe9d62a69ded3380bf4d30cb82abf68a31a3a99100a4f9383b7b4217e3195f0e5c7dda4f6d9fc57e5ec7816261235e6d0c8e7fba63fac6ab97e01ff00894d09b4b6b7254139f46b0be092ee279d4ae1d598ef11685bf106016eed33c7a4e280b4b27692ff80c03c7e7bf01fed1500a8d1afba1828358ba72fbca1df45b22328675b1c100b4311c96ee3a78978b9349376f7e9eb8f31363590aabf6ae0e62fd8786f5210eb7357af517332ec1d632baf", 0xe6}, {&(0x7f0000000200)="56b5dd63f20f93216ffe2d6a4cab69ea844feba96d2b797686204228dd8de3cd1b37d88b18215a4d9d", 0x29}, {&(0x7f00000003c0)="7025aaf8134a01db32d9a37ab772a4905477b3ad58f55643c1845a1ad7aaafb199be5f688cdbe692e1dd410ca592d8f68d2bedb1e813bc85fcd919537e2ece1c078cb6fb729f264679b09728d0ad5c9c0767a73b9dba4d4b548c5f7f12ed8ab1aedc3ede48140ff7dfef616b4bc79278e2a4144eb54ff5be84b460a68dfce4dee188d32de85bb560f429d96d64f4449afe70a6e36ab62b42b33c39253cbd36b06ef22d445177ebc8748a02", 0xab}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="96016f7977f2435fe4862f7eccf59aa48f47c355d1a63b63cbce6cb0d6d1b871d785f3f108dd3d7a586de6585bbcdb1111dc7ab60dacc011a93e7649d2b3b0c7d38bc67d88cfc394e6b07c0009022a219161af576569e16c9ccd3eec571ef8979672e0c2eb826fdfed583adc25d42c42c68ba716a1b92f45f1687f4dc907f283c1969ed4d30b714eaa25b8f681d200d243e31d9153502a82b1842509b11553f9b0da9916f5a06834583c6242ef1d7209ebd25a2e298985f0479c71ba54", 0xbd}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="240000000010000c0100000001006196043eeaca0c21030000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r14], 0x60, 0x50031}, 0x800) 12:39:35 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0xfffffffffffffffe) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 775.539797][ T1268] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:35 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000100)=0x7, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@empty, @dev}, &(0x7f0000000280)=0xc) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4b354ee9, 0xbdb, 0x9, 0x3a39, 0xc, 0x23ef}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) syz_open_dev$usbfs(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x10000) write$P9_RCREATE(r3, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x0, 0x0, 0x1}, 0x5}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) 12:39:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffc, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x1}, r2, 0x6}}, 0x48) 12:39:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x140, 0x0) io_uring_enter(r2, 0x73, 0x3, 0x0, &(0x7f0000000100)={0x100}, 0x8) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x100000001, 0x0) 12:39:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x36b9, 0x800) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x80, 0x1142000, 0x7ff, 0x1000, 0x1, 0x2583}}, 0x50) [ 776.290535][ T1335] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:36 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1200, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:36 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000001c0)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) ioctl(r1, 0x40084149, &(0x7f0000000000)) [ 777.010381][ T1342] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:36 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xb, 0x4, 0xe000, {}, {0x3, 0x2, 0x30, 0x7f, 0xf, 0x0, "e604b878"}, 0x8, 0x4, @userptr=0x3, 0x4}) ioctl$void(r0, 0x5451) 12:39:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @rand_addr="2985746c19aad1f6b935c7ecfd161583"}, {0xa, 0x0, 0x0, @loopback, 0x4}, r1}}, 0x48) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101000, 0x0) fstat(r3, &(0x7f00000002c0)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x0, 0x1, 0xffff, 0xfff0, 0x0, 0x3}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000180)={{0x8}, {0x81, 0x40}, 0x101, 0x2, 0x7}) fchdir(r0) 12:39:36 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) fsetxattr$security_selinux(r1, &(0x7f0000000040)='secinux\x00', &(0x7f00000000c0)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0xfd83, 0x29a8cf8be862288e) 12:39:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x48) 12:39:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:37 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept(r2, 0x0, &(0x7f0000000100)=0xfffffc38) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 777.791693][ T1399] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:37 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1f00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000000c0)={0x9, 0x800}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000300)={r13, 0x7fff, 0xfffe}, 0x8) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100)) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r15}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r17}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r17}}, 0x48) r18 = accept4(r7, &(0x7f0000000380), &(0x7f0000000400)=0x80, 0x180000) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r19, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r20}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r19, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r20}}, 0x48) r21 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r21, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r21, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r22}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r21, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r22}}, 0x48) r23 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r23, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r24 = accept4$inet(r23, &(0x7f0000000440)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10, 0x400) r25 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r25, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r25, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r26}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r25, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r26}}, 0x48) ioctl$FIDEDUPERANGE(r14, 0xc0189436, &(0x7f00000005c0)={0x6, 0x5, 0xa, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x7fff}, {r16}, {0xffffffffffffffff, 0x0, 0x1}, {r7, 0x0, 0x10000}, {r18, 0x0, 0x7}, {r19, 0x0, 0x800}, {r21, 0x0, 0x690}, {r24, 0x0, 0x10001}, {r2, 0x0, 0x4}, {r25, 0x0, 0x4}]}) 12:39:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:38 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000240)='mounts\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) r3 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r3, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r6, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r8 = getegid() chown(&(0x7f0000000140)='./file0\x00', r7, r8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x842280, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x838}}], [{@subj_type={'subj_type', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fowner_lt={'fowner<', r7}}, {@uid_lt={'uid<', r9}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x28, 0x30, 0x980811cd4de3c540, 0xc, 0x37, 0x31, 0x61], 0x2d, [0x31, 0x31, 0x30], 0x2d, [0x61, 0x37, 0x36, 0x62], 0x2d, [0x30, 0x66, 0x36, 0x64], 0x2d, [0x30, 0x66, 0x60, 0x34, 0x37, 0x37, 0x3d, 0x31]}}}, {@subj_type={'subj_type', 0x3d, '$ppp0'}}]}}) r10 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r10, 0x40084149, &(0x7f0000000000)) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x82, &(0x7f00000000c0)={r14}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180)=r14, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r11, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="a20000009607c8e286460e36a4699442bba08b3f52354f4a9cae3d28215e4056ed2c23669118feb7d7a164b980b802d37cc007eed2daf1e26f4d20eb76fbafa3f95c43922624eae1700b43e5af6c4f410ef15aae1ebbdf2c508dbfd7280100f6db559a72d83374d04805a0f62972c653007d0b65207d9fd26409d37f653bf7ebf53f4fbc9de8b7efc0569dae8f811cba358f3c3fd50485314993e2bb33763caa3adea4fd124410f2cbfab5d697b241369ef72588cc988b8e7b2a84a39bc8443e5a9fc19e763051b4eae1076704e3dd48189b9907bdf8677fadfbca01481709298b886153b937e86cc98b71e0915841a0149d14879252352fd062fd8c7cb2bfe52ed416a15395daed98896815079f5a2c84594f76ed85839b3ff6c2b8b281a97d7932ca6cef41e448f3af2d45"], &(0x7f0000000040)=0xaa) [ 778.465495][ T1411] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:38 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0xb, 0xfffffff9, 0x40}, &(0x7f00000001c0)=0xdd, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x26}}, 0x10) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:38 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x18, r2, 0x1, 0x7, 0x6, @dev={[], 0xf}}, 0xef54aab64576cc0c) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)=0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000240)={0x18, 0x0, 0x6, {0x1}}, 0x18) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000280)="aba5f6d67cd29021c06d57a2bfd6c1c1c57e750ad126b8c7aef82a8637fd3313e8caffdc22be0912b708f137bc470773124c19234021e2161cb8f00b3f1767bd4f70424fbb697cbd618357a1bb3ce6cd5db3756166e701d48f0d642414c085c494f4b349c9b0b70b87f1f58270a81af44df2e99f292ee31853eeceaa8a21e64bed9c9bf731419a89", 0xb1) read$alg(r6, &(0x7f00000005c0)=""/4096, 0x1000) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) ioctl(r0, 0x40084149, &(0x7f00000001c0)="12488ecb591707cfb0f171a86fca92d5d76a7dc0e590017c3f238729041d8a2f68de9066d85f") 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 779.256899][ T1456] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x2000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:39 executing program 3: getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/157, 0x9d) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/\x00\x00\x00\x00infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) 12:39:39 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x8000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x100000000000003f, 0x80) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, 0x0, 0x9}) 12:39:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 780.156966][ T1487] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:39 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x200000100000011, 0xa, 0x0) unshare(0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000380)={{0x7, 0x5}, 'port1\x00', 0x8, 0x0, 0x7f, 0x2, 0x5, 0x18ec71ed, 0x4, 0x0, 0x7, 0x3}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000200)=0x80) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40084149, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) getegid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, r7, 0x0, 0xffffffffffffffff, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") setsockopt$sock_int(r5, 0x1, 0x34, &(0x7f00000001c0)=0x7, 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x0, {0xa, 0x4e20, 0x1f, @rand_addr="ebed3904d66362e1e25f1a866ef0f7ab", 0x20b}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r8}}, 0x18) 12:39:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r2, 0xfffffffffffffffd, &(0x7f00000000c0)={0x2d, 0x3a, 0xcfe}) 12:39:40 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x68100, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, 0x0) 12:39:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 781.007097][ T1541] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:41 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x2003, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b359a11300000065ffff010000000600165032303030ac8d3a1f0b57453044bdddf933e2a8ca41783011ab46c1603f3c287d279b5d75cf3f96cc50ff2451a575c7ca0b11b7afb4379f2676e0d348b5321a79a5372a4e5759ef678aa26efba7b5b1132086d036d6bfb29bd8207414658c25b97594a7d8f8ff0fb8bf6e42a3f088ce7d65b9c571fb05bc311fb89dd3c3f300dc5006c578bb497a183303"], 0x13) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:41 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x2d688136, 0x8) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:41 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 781.646852][ T1554] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100400000000003f, 0x210100) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0xfffffffffffffec4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) 12:39:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0xfffffffd}, {0xa, 0x4e20, 0x0, @mcast2}, r4}}, 0x31) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x5cb62ff99e405c05, 0xfa00, {{0xa, 0xffff, 0x0, @mcast2}, {0xa, 0xfd, 0x0, @remote}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) r7 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x7af, 0x40) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r6, r7}}, 0x18) 12:39:41 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r3, 0xc}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:41 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 12:39:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/77, 0x4d}], 0x1, 0x0) [ 782.423207][ T1607] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:42 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3b0f, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffeff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x100000}}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="5a62e038bdb106517dac9d410dc7f89ed2ecb0b68b655ab50bc82e1454", 0x1d}, {&(0x7f0000000340)="0041906018db93967c6ef43d816dba8ab251303dfdbaf3e0bea3458c735114636abc16c9a769924056bbbca9d37cd6f4120fc53aa89873ead0efff6484e7a0e1f30a74d5e7720b286a23b8eb18168438606f5185d02206f1ff751936e00e7f167ae1821ae220ae8a003735fb89ec98bc8943f797c2bca6aad04ca22b5a3b", 0x7e}, {&(0x7f00000003c0)="45fab118a26f2b80950947861d9ea15cfd72ffe749b999c2222f55e260c83881b0b30b4f8d2f5a6e3091dbb1d0124e564d6c59cd7d8e9f08a55a939c6649f87e3dc452f70249fb5f865df900e13725ae58ccb4d956d9fd3cde7c5f87670a7dd959366d896d68474a04bcd18200a93737ec8abf63d506ac4f6f8e26e94e82e21083a427f734eaed86260276f3423090f2", 0x90}, {&(0x7f0000000480)="53c8ceefacee469cb13bc141bd9a9cafa5ab", 0x12}, {&(0x7f00000004c0)="458e61bdc14c5e9c9afd0d36a11b55baef50801ff44667567f533b896a0a1426fa1161f245603d0cb6e5b755244cae11", 0x30}], 0x5}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000600)={0x2677, 0x5, 0x1, 0x1000, 0x6, [{0x6, 0xff, 0x1000, 0x0, 0x0, 0xc02}, {0x6, 0x7, 0x1f, 0x0, 0x0, 0x800}, {0x0, 0x9, 0xffffffffffffff01, 0x0, 0x0, 0x1500}, {0x7, 0x4000, 0x5, 0x0, 0x0, 0x4}, {0xd9, 0xa934, 0x80000001, 0x0, 0x0, 0xc}, {0x8001, 0x100000000, 0xfff, 0x0, 0x0, 0x5}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x4e22, 0xfffffffc, @mcast2, 0x401}}}, 0x90) 12:39:42 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "348ab61ed0a94ba8a6d79ef084cd087db81dd19f"}, 0x15, 0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0xdf}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000340)={0x8001, 0x8, @name="2ca46e6b9e08918e73f4a1e1a0a7427345d680fd9a78bfd12f15bd195c95c035"}) pause() ioctl(r0, 0x40084149, &(0x7f0000000180)="53f040b7d277f96eebe9aa0625454b0f8b7d9fe31739aa0bbce2da649e05d7a783fc3757e15589164985eafce8d4e2d92b18da6433ec3d1021c19f060387dc828cff2e9111267e1c3ce5a41f4dc3a063d820") vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="981fed8a9e2a05e836204ecccc98abc76733cf1de0285ad2418c5210f379b2f97f624d5b737b7feb8a1004e6f69099cd8c57ddbc3b23260b48c1725b3dba7ffaa4707a30ac5c3802bdac91506d1974c7fcf1d52aabbb0faf653ecdcbae031fa06f3a2d2af139c39f122a14defeece53aec024996a7e2ffaa34679ca84cba", 0x7e}, {&(0x7f00000002c0)="58f3ebcdfea1ac4df83c12c913584866102adb29f5c21252654832020edaaa6cafc2db1f6d948dd0dc58b664b1ad3ae51b007197e4f33bb80d64ccb80d742038fa10b824b55b0af48b7163a1", 0x4c}, {&(0x7f0000000340)}], 0x3, 0x4) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000400)={0x2, 0x7f, 0x8, 0x81000, r0}) 12:39:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:42 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$smack_current(r1, &(0x7f00000000c0)='aead\x00', 0x5) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r4, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x203, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) r6 = dup2(r3, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={r5, 0x80000, r6}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01009c16", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x82, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r9, 0x81}, &(0x7f00000001c0)=0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x82, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="000403000417bf4bdda9"], &(0x7f00000000c0)=0xe) [ 782.847085][ T1622] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r0}}, 0x18) 12:39:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x7fffffff}, 0xb) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1, 0x3657) 12:39:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 783.201417][ T1614] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 783.434113][ T1667] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:43 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x3f00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0xc0, 0x2, 0x3}}, 0x14) 12:39:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x100000000000005a, 0x20) 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:43 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/\xb5\x1f\xd3q\a\x00#c\x00', 0x0, 0x200002) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128l)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x1, @empty}}, 0x1e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x200, &(0x7f00000000c0)) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000240)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000080)={{0x2, @name="c19a70821086c37a6fe30c4c06053df41c811309d2e00fd77a8fc155e6ee5dab"}, 0x8, 0xffff, 0x1}) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r8, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0xebd6, 0x0, 0x3008, 0x5, 0xe33, 0x8, 0x10001, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000180), &(0x7f0000000100)=0x91120cb52b2fbfcf) 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 783.896705][ T1693] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 784.149219][ T1697] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 784.339761][ T1719] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:44 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x86d44f04bac7b4e0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@mcast2, 0x3a, r4}) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000) flock(r1, 0xed890d3265657ab4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x18, r8}, 0x14) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r7, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000001c0)={'veth0_to_team\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x4e23, 0x0, @mcast2}, r6}}, 0x48) 12:39:44 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="bbdf0000060000000b8e0f0a0187f466a47c58867b84b0578ceb4dfd8470b1582c954de38d534345d79950b397d56ea3bd6fd5963c9526ba81053766b5624d1a8a38c811942bff34673b30dfcc7ebf720e0fa5942ac8f305bba09e5177252f1d0e000051488199ef100f7c6398ce4c378a4dd3637a02350cd377d76dbb5283cff80d0910de2c34b816987925f59e282777aafbaee34ef657a238c783e66f0cde38e84826e45eb87d04679c4ed6ecf3e7d8"]) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/47) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x4000) ioctl(r2, 0x4008414b, &(0x7f00000000c0)="49d0aa94c33d445b89ab02d7dc72a8463074d1dec983b7a6910c5824430319d73f0891c4b20cb57e21d3f80d85c30db7aa96164ea2deb58218833502a23fae810dca48c26c96b55925eb5749710df848c3ccc527a2546f950c0aa14c44192d43a1cbecbf0826ca374149213b4c10e5c0a174101f6c049586f7dc83e77f1ac4b0ee54752f811bbafdcb5cda5ac8df13b51a178bd6295b6330758ec3d92ebd209cb821c73a1141b33b78fc19d48307101500fb830a1c3a90e56378998f5db0dae4d07fbc702687fa5a45fb19254e330ea4fd0358a96e23743e06f3b6") 12:39:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740), 0x26, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000000)={{0x9, 0x90}, 'port1\x00', 0xc1, 0x10, 0x5f9, 0x10001, 0x0, 0x1ff, 0x2, 0x0, 0xb6058b44b7b76e05, 0x3}) [ 785.048503][ T1735] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x100000171}], 0x31c, 0x0) 12:39:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:44 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x82, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x9, "3f3ce4148a1d179679"}, &(0x7f00000000c0)=0x11) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r5, 0x40084149, &(0x7f0000000000)) 12:39:44 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x10007, 0x65f, 0x1, 0x4c1c}}) ioctl$NBD_DO_IT(r0, 0xab03) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0xa, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffc1d, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) 12:39:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x55595659, 0x1}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$TIOCCONS(r1, 0x541d) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:44 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 785.879722][ T1806] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:45 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4800, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000240)=0x8) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x2, 0x76611dc3f230b66d) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000002c0)={{0x0, 0x0, @reserved="c9e8bdac87c28544247ad2a830a8f289033b50682c2e862e4b2b9993ece657ab"}, 0x70, [], "ed69c0fa075cb21827298b1a2d3a72c542b2ebaab16083dfe50070d27ae18dee9780190191afbbdb6f1603481a0dc5cb60eee795a9ae4bf7e2d3c3717e29a835b385b79541fcc030f3221c399fc34efa6a0de8b0d9cddb4e285846201d3c66a8e6ae250deab237562677df78ec211a2b"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) 12:39:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dv\x12];\xcceo\xf3\x00', 0x40, 0x4040) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:46 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x8000, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 12:39:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="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", 0x1000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x800000, 0x8, 0x0, 0x1, 0x7fff, 0x5, 0x5, 0x9, 0x7e5, 0x100, 0x2, 0x5, 0xe95, 0x5, 0xb, 0x18}}) 12:39:46 executing program 5: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000100)="c4820683e6cc503a26204c17fccf6cc3e40d7b5741d7e7c8ee1914d6477c98") [ 786.549424][ T1821] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:46 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x20000000c1eb) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:46 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 787.327699][ T1859] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:47 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4a00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x2000, 0x10000, 0x7}) 12:39:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) mkdir(&(0x7f00000001c0)='./file0\x00', 0x23) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xa39, @mcast1, 0x3}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 788.151088][ T1863] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e24, 0x63, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r5}}, 0x38) 12:39:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000200)={r6, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) 12:39:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 788.951780][ T1914] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x9e4d590b5c835c35, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x6}) 12:39:49 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x4c00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:49 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 12:39:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000ec0)={0x11, 0xe0, r4, 0x1, 0x0, 0x6, @remote}, 0xfffffffffffffd72) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) sendmmsg$alg(r3, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="094edf68bdd15abe57c13b6b0dc8f57429b8aa", 0x13}, {&(0x7f00000001c0)="f92548dd9295acfc2d", 0x9}], 0x2, &(0x7f00000002c0)=[@iv={0x80, 0x117, 0x2, 0x67, "af996775139e1bd63947e73fa6299c104078931c73749e3c170884aa22b12bfcd84c5d1775f85302906455e81722672af9b2a95329e3a185f36d825202f9553d8232fd0b485556d9342757ebcc7889dc9f08dccd983953f217b86186394f073d169395815f9372"}], 0x80, 0x20000080}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="c5042398667857934a5512e059d205bc571aef6d6c614e1492fd915d93792232b1aa4456", 0x24}], 0x1, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18}, @iv={0x70, 0x117, 0x2, 0x55, "476ad2a737c5aef7ee17f51287929e0981f6928566bacd0c51b7499ea3ee928fdf95e3fe17ee6b24ea52651f05297e8cc2ab31e5b7c7c5a6fbc405cda031790a795bc279a20658bf4296a1003442d4d85c608b968e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xe7, "f61a90fe87acfe96bc39b67a6e1794427201ac3c3942d9516bbcb6749cc945a11e39a4dd27d69f00e436eebc033ec574ba42f515a4b0037b6f6256ba4d738fbe60326f7ea7a2ed568cc55cf0c13146176890aa78909e602a982e2fa1599a8e1ea10799d35d56535511f2c2e3b2d1b892ae7de883af8790b987bf11542ea0b2385afa05d4e2b94b6af28f6515c91db363c420e4bed41d93b69dfaeb9be779669c26f768da8c97963ac3cd9ba4bbe5d163807c786686c3ad8ee096d8de8d8fb4eccca6f0284d6e64fdb8d5b65b41185343c4a41c23dc77d843d2445a8a332046727be0eaf6dee690"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x218, 0xc892}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="81a4c7f2b5bca6d68ef06f4cda810ed41a4e46a191cc84708fd9860bfa1ca2ffaaab2a1377b007d60e9793625d87a7eaa8fa0a7ecc4e99ebc1a1bcf710138217b314d7d76959684ac806487115a843b32dcf1fe1d0655f6e5e20", 0x5a}], 0x1, &(0x7f00000006c0)=[@op={0x18}], 0x18, 0x4000019}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="13eb85cb59aa8479e660b2e5d14d6b96eb72cf5cfd4f1c0fcb1b25a61e0edc5aa94a337b4a2f5a27840ed74f5b28428fc24e70f261a9df7e38dbd80fc2bc98a40761e6522ff87cfd204d1abb8326dfcbf776da076805856e338f00330c4a88c8a04151d442a3c4d241a3070a5b80cc402a07a32308910a2a020f572eab523e83c67e1b69a21356c50189acfdf7acc173288df57f3b545f95691dd0042fd899fc403e399907b0d2aeef1c9b323ddfd369c551a7ef19455039501911ee25d62aad42683da120", 0xc5}, {&(0x7f0000000800)="bf9afe1d82a6a1f5ca964cc85625094f40e39646f9c2a6da6f67859950e8faa1e15fcc2a740e030c05f52e6be16fdf4ebc5827d4178795c66582f677492a8bc811eff546749a80803575423f18cc3943da19cf308d743ac222b0cfc01d2f9534775bc59e36bc6e07f2d77ad4d4e5be78c98ca7aaadb17b98a1b41153a43261712cb5c35bbf4a4c512cc7723a80d0abb5571b53ee9d3d7149be86dcf0d085b9e8325374bf0829dd3f669a2cedbcbb0a60f9380ce196f2160604f8a247dfed636eab7e87bdb56f00cd635c56f9f732c74291a879d44a6611be2cfd44", 0xdb}], 0x2, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x555e92dcea7f4df2}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000980)="f74429cf0692102370251d295d6292321e0a4915f1bcf5e3edb1da94163e7052300306c6ff2578", 0x27}], 0x1, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xef2}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x88, 0x117, 0x2, 0x71, "3ec07001c3c6e3164d6acde70559f6b233950c4cac9881160249228be5d8d12768914292a0257d9df355649692c8f256a77ee81d1f6e8182ddfbc07c58a17332c8a15cfafd19f8890e715c84add8c410603db192cbe4054992150a01253c09d35dbc8ee2d93fed94840358fa92cde48387"}, @assoc={0x18}], 0x100, 0x80}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b00)="82d85474ea04f1be6b9b49838d497a4d13082e49af86f2742fe890ab63fdfa293208340705ac5745c2da325a42463e696f511e2159db6791fa38e831da6112dc649a2cc04c65f49c5c2019a0439d0f3466b32ff5feb952c617328db2c3f7d239b029b18f11c456e49265b410b45f4a6104d8ff615010c8388347a51699a8a61980d4ff5f1f22eb6c229607f83de05a866cb4a6fe11218f4abed5e769eb6aacfbec7ccae1d4a2d1a1d057e5e06984a77fab97cf17dbe3881f1e7f53218e0ba1cbfe5c9dac53ff8e4dd03e36229593e03739984b97d44327a5c1", 0xd9}, {&(0x7f0000000c00)="a2f948594545d57ff0ab981d4824abe53b8e9976cbf60e8b4e0009d5220ce0c9f7314e3bec765e036feb5cdc8fac1a177b36198671238d66c88f37522f97500cde4d93c69f3fd0a0832f569e298704e499013a6c73f18e11f7d632102df52ea71a4a6f1ba8d6ec", 0x67}, {&(0x7f0000000c80)="9771f2f471f512705429e36993cf082b52570b089e", 0x15}, {&(0x7f0000000cc0)="0c1001c91086eff5eb1908a9da07870e5ee3f7dc26f5e0d118fe88ec73ee049506fb3ed45d98251d37c07dad17aca8aacc163e9dfd5cc2b15409766cabf9b533c348374648bc3d8174bf4ec59ce78e63a6ad1e850f54e3599fcd3911071551318b3f40d44dd82e42b8e0a899e6bfe8d522b079b68da6526fe8d43cb78ef1a6f1525175fa084d5a9b263ef22b68e56cfbeffa8cdb51222b892caf1f924736ca135fc0df5d38a12b737da7c97770775cbf23a5e36a5f7c23dd6ddeb98a6d97701da94c4e12808763e188c161a1f4d5bab712a327ddf0626c6835a0303f910509d60a0eca2f7f71ea36c3c695314e2839e72ff3a2327003c12d2c", 0xf9}, {&(0x7f0000000dc0)="c5fa5d1d49d60238de7ed3f9eabef3548b2cead84620183012bf0de1691a0299543e04823790eb2ce32ba23716dbd9bb47b63542ff764d5cf5b6738caf32f866def10dbb8730b16b5e49c2b64eb1298f0def96c4682afc673c46768f488cf1db785f", 0x62}], 0x5, 0x0, 0x0, 0x40040001}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)="40359ee8f77a3c284eb080678eefa2847915acc83ddb0b", 0x17}, {&(0x7f0000000f40)="cbd20177bf061cf81a6feae5e514da94534f19f7dc7757bd26c4fd2bfd060572b0ba72930b57ae741484b3929c261d98ff82fd8b21018017b37bb22b3d1df0ad022b5054e2e59aaa55ca8b86495b5f0896ce021058e8fd5de10e04857ec5db24cc93a24cd504d8bacd72f40ce6d275fb455988231b690136dfee1d09bb271b79403077a3bbfa8f9ea60d0b4c195643616a7a7d9fe65fe8d196ef637f93a1067dee3f3eefaa817a3dda02d44844d007", 0xaf}], 0x3, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001040)="0afea1266a5bf16261e46a9a443a6775150e59b9c82f6ce8a3d469f30cee2b3c61a95135cce3006d3d449432fdc5f5f13138c61ea6dd25517b97d16375d85bbb1fb7f8e940fa592a33a52e4081d6d75e1d475177163c64ff9649af064ed9369ce3aa33aab0c123b7f5c6156286aba17f64ca640e0d1bc4e246b1d4dfa586a3563c943b360ddc81d4a4ad05d88e266922638767f5ace154f47da2c9dcede705f0f1c97974c4447592befd9d333a1f896b3ab3a5100c12efe0f3632c323d79e640f09bd55d43ed57057d2d0786", 0xcc}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="33bbabbc0ea00391bcc11832d0cf091930f4f6cc2d8849ec3823f4b382f8433666cdd6a68fd5c90f8229875c9d70c45e43e9266a33a18c7383ffef621ab4ab92e9487a286130dc0d4c7960a5a375ab7ccda8c343799bf4f5c0d801d1d8bd6ca4b4df98bae5ee13fbfd63cf", 0x6b}, {&(0x7f00000021c0)="0c2f8b9866540494cb56c44dacec86aa5dc65e32", 0x14}, {&(0x7f0000002200)}, {&(0x7f0000002240)="badc64e6e2cebb86d6ba387fefd68e1b8f43dc627b583e848da24020da1748032b42549a3441fe49144fa282062a5c9bcb2812da0bb47ddaabad26d3c29de20c17c113ddb20abf1091d9cca02c8f51b51a3b19f69f56902e1977468dadaf7c64ab51d05c85704b3d2ffb81557fef4f649252f49b1c10d3dee0b4486e9cd0c7357fd9ff520c79a55c9554e89a856c4df43725df7c2d71ef345c8486a06ffeb3d1ca20b7932df0704e63abd806b1c1681d77626e9e97300f04090c568a9a440490cb796322efeabc9b5b2c3fbe874150953b99a454cca7ac", 0xd7}, {&(0x7f0000002340)="d77045767fabc805c4bb5562c82b5dcd765623816b826e5d6bb1a1ca9f7c7d0121dcadcb7f4e078057b449a9759fa65770b759640c888836e52d0d5bb2e52b8386ecc0b4f210e98cfcd59de9231d3d8175aeb0009d4715bd0625a38debd1e4f082855fb9f2cf847cf120d97ebcbd97e4ab5b6cb0c5cbda34ec7a73a07fd557af85dfa0f30a508d9cfe26b75482ee9a8241c832b62881d47be2efbcc26826fb39ce229b42fc845b557926d8b7203e20c1435463cf11b70930e4c21a07dd87d85c4a41fb62066489539cdc504a83065245990652328dd0d94c31169840e0d514753b8af44b6641", 0xe6}], 0x7, &(0x7f00000024c0)=[@iv={0x50, 0x117, 0x2, 0x35, "b8dcd40a406d530d20837f66b7d2e42c56f05606e94e5e8ad30d5754cc7423d5c0dd780ab205f88e63b8cebdb947b499982ff93374"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xba, "08216528e365a46b557d393f024df6e27169f53b5ee72080d2e835715902e8dc89a2b8d77f8eeec60087b5aab3e8eb5ed492098dd7fcd53c5a9cc3fb9aabe4a66139b0bd776a4b4486192b0fb61d316878cb37451bf01563449176887fa83f1ace492f26568f8f2e74b62e0e9a946aff7a7ff5d90f91dba21cdf7ab953c328161731bb0b7c759dbcd44cf7ddc8ad6e3084db5592cbec469506f245dc29781d0d97cdd9176e61a5fc76d04d17209fa3493b32e1799d7d98d246b5"}], 0x138, 0x6ced2da958af1b8e}], 0x8, 0x800) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f00000000c0)={0xcf, r9, 0x10000, 0x9}) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="39000042bf3d3a7fd8abb8001300090468fe0704000000000000093f03000015000a0000000000", 0x27}], 0x1) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:49 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x408240, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000e200000000000000"]) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x16b, 0xfa00, {{0xa, 0x0, 0x800, @mcast2}, {0xa, 0x0, 0x0, @empty}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r4, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0x4, {"bbb704d669cb47e7543705576031bc12"}, 0x7, 0x5, 0x4}, @ib={0x1b, 0x81, 0x20, {"639dc38cd677ba77d5e10262cfdca9c2"}, 0xffffffff, 0x2a, 0x101}}}, 0x118) 12:39:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 789.841720][ T1944] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/81, 0x1c6}], 0x0, 0x0) 12:39:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000001c0)={0xd6bf, 0x7f}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x50400) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x378, 0xfa00, {0x4000000000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) 12:39:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x100001000000003f, 0x10000) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x100) write$UHID_INPUT2(r1, &(0x7f00000000c0)={0xc, 0x5a, "bce69cea003e4fca92a3a75bff0e32a1c1f55af5c20edd123df52ab92b4f0dc193fbb23b5c3af84cb84b2d59073d1876dedddf017c5c257e0de69eb4109882b5fc229e1955715edc9dd979102cc57dff26f1a77f7a0de0237c16"}, 0x60) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x4080) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/59) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}}, r2, 0x800000}}, 0x48) 12:39:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 790.693994][ T1984] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:50 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x5865, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x8000) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 12:39:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003b, 0x41) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0xc7, "576bf9b1a7d9a9402ee286ac7e70f1b232223403d9347b68671970d91f1eec17", 0x2, 0xe626a609b972405f}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="bda037a7de31e59f004ceb3291c1773b156a1573ac2c44bec9619d354d5bddc4d4e0"], @ANYRES16=r6, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="cd531e05c2004a166ab764e568f5530f007aef43647c1d6b6e26d649d206f6bb4713af91958501c045a10c8a83a7054b4c4eaa3f70aae2ea6eec55d8fc430380e102cc07b781c72d7b293b30093c420eff0e221154254b392770d00bc2d7211940812ac501201d4424b644fc0dd74164155d0eae4f3f9bec45064f5a2562c59a935303a35dec9a15aee45c8523bf8167b3a5bee55ccdb38e5ef129175f4b4b09d45cb90e85a6d13bd2bbf7c14360"], @ANYRES16, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0]]], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r6, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x10) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000340)) ioctl$VHOST_GET_VRING_ENDIAN(r9, 0x4008af14, &(0x7f00000000c0)={0x2, 0x7f}) 12:39:50 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000002c0)={0x29}, 0x29) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) splice(r6, 0x0, r8, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r10}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r10}}, 0x48) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000080)=0x4680b2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000001c0)={0x2, r7, 0x1}) 12:39:51 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_int(r0, 0x29, 0xb76c0b45bee04a2a, &(0x7f0000000180)=0x11, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x600000) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x112, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) [ 791.419477][ T2005] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x8) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffff3f, 0x0) 12:39:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:51 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x77) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f0000000340)=[@dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/151, 0x97, 0x2, 0x3c}, @fda={0x66646185, 0x9, 0x1, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/198, 0xc6, 0x2, 0xe}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x800}, @increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r2}, @dead_binder_done, @free_buffer={0x40086303, r6}], 0xf0, 0x0, &(0x7f0000000400)="3c7028c5f7efeb10b593e5595a406a7c2670f70d304a9437643ea3135b2055f22254e750ae4effc26aabc667a0e4063f1d3757e489ceea90c215723adb209d05c3247e1727d28cf095b60ea8039d86e631f7ca4a8966e74b28cf01320e26d80668daa2fa98d5c8076f1c9aeef3cca7810881cc644b99d52ccc59c76997ad11e06ab2488d857b0ca56e0313afd152792ea69acb16e6a4e9311c9f0e62c72884b5d205ef393c57564bd1b0ac1f7056119810cd9cb1963c1b58ba04076b2d3ef402bf85e70c67765dc578abc8b8271053c34f6f475b9c0612420e9e6e2396bf1435621a6378d7cc060e0a7682ea54f14193"}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r7, 0x40084149, &(0x7f0000000000)) 12:39:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0xe0c}}, 0x48) 12:39:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 791.938921][ T2024] vivid-003: kernel_thread() failed [ 792.021773][ T2004] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 792.082575][ T2050] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x7fffffff}, r3}}, 0x48) 12:39:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x3, 0x283f2952, 0x1f, 0x80000001, 0x1, @discrete={0x800, 0x1}}) [ 792.267329][ T2052] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 792.354939][ T2069] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="0248e9231a5a29eeb40dd156da361ebc66853d3286ebebe4c16c6a9932a0d4b2f9c03321efa53f5485c7455ae790d4cd4c8801d13f470487f03712a1df4122398dcdf99fa4e0570324e356d52084981bea5feac5d0e38cb5402fb4e3c596faf5dcd8e8418fdc9a5c7db0508394a9326e1c7e46"}, {&(0x7f00000015c0)="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"}, {&(0x7f0000000400)="8564b3ce6958cbec48b57b75305c1531b828b8f1ba8764fc75d67a3977307a57c98c63186e7545ef7f7c971cd94cd99a9f4fd121df5be65cc65b9b40c56ceec0eae7923fdd1efb5af3740c5dec9ad392"}, {&(0x7f0000000480)="c80f64b0789d91308553dc4b944021dba5b6674a69f28503a278ee31429036e131c0c03002e2c8943861a18a198a1f5e67d147c0c3a89d60265bcc5b8ffb54a461fe8ab149c3e839c7c7023917976381ce6dbb4275bf1e5b0f93b649b4cf6f47d6edeffe2ec06292a1d3e20031eb084f8a2e"}, {&(0x7f00000025c0)="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"}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x50, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b63000001634040020000000000000000000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="8561646600000000080000000000000000000000000000000600000000000000852a62770d10000003000000000000000000000000000000852a6877011000000200"/80], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000f32d003800"/24], @ANYBLOB="0563044001000000"], 0x1000, 0x0, &(0x7f00000005c0)="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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8}, 0x14) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r10}, 0x14) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r9, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x82, &(0x7f00000000c0)={r13}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f00000002c0)={r13, 0x1c, "9de76e63b1377a43ede71c1a8614b310f33cf7db6fd5d5882708b3b2"}, &(0x7f0000000300)=0x24) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r7, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) bind$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev#\x00\x00\x01\x00', 0x6, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgrp(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x1) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x3, 0x102, 0x1, {0x9, 0x1000, 0xffffff01, 0xc1}}) preadv(r0, &(0x7f0000001740), 0x1, 0x0) r2 = getpgid(r1) ptrace$pokeuser(0x6, r2, 0x9, 0x7fffffff) 12:39:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x26e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000100)={0x0, 0x80000001}) 12:39:52 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='a\x19Ea/sb#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000000480)={0x80000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x29, 0x0, &(0x7f0000000300)=""/124, 0x7c, &(0x7f0000000380)=""/237}, 0x40) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000004c0)=0x800000) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x800) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x1000, 0x80, 0x0, 0xffff}, 'syz0\x00', 0x52}) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xfffffd24) r6 = accept4(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0xfffffffffffffdd0, 0x2, @multicast2}]}, 0x20}}, 0x200000e0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) splice(r12, 0x0, r14, 0x0, 0x80000001, 0x0) ioctl$RTC_SET_TIME(r12, 0x4024700a, &(0x7f00000005c0)={0x35, 0x38, 0xf, 0x3, 0x8, 0x1ff, 0x2, 0xc7, 0x1}) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000014000100000000004ffe0aa2c600000000020000c9", @ANYRES32=r11, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0xffffff1c, 0x74, 0x91f, 0x0, 0xffffffffffffffff, 0x401, [], r11, r2, 0x3, 0x2}, 0x3c) fcntl$F_GET_FILE_RW_HINT(r15, 0x40d, &(0x7f0000000540)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1, 0x0) 12:39:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:39:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1840808}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5f2fd2d32df4e9c1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockname$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) [ 793.223058][ T2124] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:53 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6558, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:53 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4400) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0x2f, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2, 0x1}, r3}}, 0x48) 12:39:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r4, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r6 = getegid() chown(&(0x7f0000000140)='./file0\x00', r5, r6) r7 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r7, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r9 = getegid() chown(&(0x7f0000000140)='./file0\x00', r8, r9) r10 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r10, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r12 = getegid() chown(&(0x7f0000000140)='./file0\x00', r11, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r14 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r14, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r16 = getegid() chown(&(0x7f0000000140)='./file0\x00', r15, r16) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)=0x0) r18 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r18, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r20 = getegid() chown(&(0x7f0000000140)='./file0\x00', r19, r20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r22 = getgid() r23 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r23, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r23, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r25 = getegid() chown(&(0x7f0000000140)='./file0\x00', r24, r25) r26 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r26, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r26, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r28 = getegid() chown(&(0x7f0000000140)='./file0\x00', r27, r28) getgroups(0x2, &(0x7f0000000340)=[r28, 0xffffffffffffffff]) r30 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r30, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockopt$inet_IP_IPSEC_POLICY(r30, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) r32 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r32, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r32, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r34 = getegid() chown(&(0x7f0000000140)='./file0\x00', r33, r34) r35 = geteuid() r36 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r36, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r36, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r38 = getegid() chown(&(0x7f0000000140)='./file0\x00', r37, r38) write$FUSE_DIRENTPLUS(r3, &(0x7f00000004c0)={0x568, 0xfffffffffffffffe, 0x5, [{{0x1, 0x2, 0x9, 0x1, 0x8, 0xef, {0x2, 0x8, 0x6, 0x2, 0x9, 0x4, 0xfffffff9, 0x8, 0x3, 0x7f, 0x7ff, r5, r9, 0x9, 0x4}}, {0x3, 0x10001, 0x11, 0x2, 'cgroupselftrusted'}}, {{0x1, 0x1, 0xf9c, 0x7, 0x3d4a2484, 0xffffffff, {0x1, 0x6616c53b, 0x81, 0x9fd6, 0xc, 0x8d, 0x0, 0x8128, 0x200, 0x40, 0xff, r11, r13, 0x8, 0x8}}, {0x2, 0x100000001, 0xc, 0x20, '/dev/video#\x00'}}, {{0x1, 0x1, 0x6, 0x4, 0x6, 0x2, {0x4, 0x7ff, 0x3, 0xae2, 0xfff, 0x7fffffff, 0x4, 0xff, 0x9, 0x5, 0x6, r15, r17, 0x6, 0xcb3}}, {0x3, 0x9, 0x18, 0x7ff, 'cgroup/posix_acl_access!'}}, {{0x5, 0x1, 0x100000001, 0x5, 0x40, 0x0, {0x6, 0xfff, 0x9, 0xaad, 0x6, 0x40, 0x4, 0x200, 0x8000, 0x81, 0x1f, r19, r21, 0x1, 0x8}}, {0x3, 0x1000, 0xa, 0xffffff01, 'locgrouplo'}}, {{0x5, 0x1, 0xba20000000000000, 0x3, 0x3, 0x1f, {0x4, 0x6, 0x5, 0x1, 0x11f652d4, 0x7, 0x3, 0x9, 0x8, 0x0, 0x794c, 0xee00, r22, 0x8, 0xe5}}, {0x0, 0xa47, 0xc, 0x2, '/dev/video#\x00'}}, {{0x3, 0x3, 0x4, 0x100000001, 0x3a, 0x9, {0x6, 0x65, 0x7ff, 0x80, 0x10000, 0x9, 0x5, 0x10001, 0x9, 0xe6a, 0xffffffff, r24, r29, 0x3, 0x5}}, {0x1, 0x80, 0x16, 0x3, 'louserppp0selinux]^em1'}}, {{0x5, 0x1, 0x4, 0x9, 0x874, 0x9, {0x4, 0x9, 0x200000, 0xe88, 0x0, 0xaf2000, 0x8, 0x9, 0xfffff000, 0x4000, 0x326f, r31, r34, 0x8001, 0x4}}, {0x4, 0x2, 0xc, 0x6, '/dev/video#\x00'}}, {{0x1, 0x2, 0x8, 0x6, 0x2, 0x80000001, {0x3, 0x4, 0x8, 0x100, 0x9c, 0x9, 0x7, 0xe40, 0xffffffff, 0x3f, 0x7, r35, r38, 0x800, 0x1}}, {0x5, 0xc3, 0xc, 0x4, '/dev/video#\x00'}}]}, 0x568) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0xc001803, 0x3, 0x2}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x10000) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8}, 0x14) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r7, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000000c0)={0xfffffffffffffffd, 0x9}) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 794.014246][ T2147] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) 12:39:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000001c0)=""/69, 0x26, 0x45, 0x1}, 0x20) writev(r6, &(0x7f0000000100), 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:53 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r0, 0x0, 0x1, &(0x7f0000000740)='\x00', 0xffffffffffffffff}, 0x30) r10 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r10, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r12 = getegid() chown(&(0x7f0000000140)='./file0\x00', r11, r12) r13 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r13, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r15 = getegid() chown(&(0x7f0000000140)='./file0\x00', r14, r15) r16 = gettid() r17 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r17, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r19 = getegid() chown(&(0x7f0000000140)='./file0\x00', r18, r19) r20 = syz_open_dev$sndtimer(&(0x7f00000008c0)='/dev/snd/timer\x00', 0x0, 0x10000) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900)='/dev/kvm\x00', 0x20001, 0x0) r22 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r22, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r23}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r22, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r23}}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r25 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r25, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r25, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r26}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r25, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r26}}, 0x48) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000880)="2d1472fe703f879d85edab6cfe52488183dfa679a46ec16611e8fa98becd59", 0x1f}, {&(0x7f0000000380)="d66bd393f7a9b9a4cec85932bfe23b9da255991ca7f3ae6923", 0x19}, {&(0x7f00000003c0)="f65edf7a3a9d4bbac9027f83dd1909944cd0c121cfc3209cde367b62454b9cb1b860c4847fa5262a0043e20e17f4aaab8eb2db8fc54384dc1796fcf300c2d5cebf20875507576f8108d6ec8fe58514a81ff9afe8682af5b98772383cfb313c723b792811b5ee6d09f99c5ff45bef5bb357ac8eef83b5df684f5a3e0262166d422a650027791b715096a4ffddf8e4ff1a7533482a2887ff904c2faff09222383bdc5c4fa537bd95a1b54a4e0bc227c63d82c9e9c84ce5b595bdfb50e14479582d7eb206299594a570a18b603596", 0xcd}, {&(0x7f00000004c0)="d1d1759a146709e1cf9e0e0dad9672cfacea89a0e1a2b996f240737fd2ab4433fd06937ae63743492739978f4673056bce6fcc1b358350ccac1e2d71c94d52053f558e93d97347d749544460e42c92092864a4a40bfa4221c2fc573d602f3d273bb3032d125d5cf65492865df965cc043962dc7ab907cfccfe9e1e7ddde9dd8470e7467162dbdca83d9dd1f0fdeecb569ce7efd683acc603ff90763980ec73364da70b43fd4bb94cd5bd5ef0da", 0xad}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r16, r14, r19}}}, @rights={{0x2c, 0x1, 0x1, [r20, r21, r22, r24, r1, r25, r27]}}, @cred={{0x1c, 0x1, 0x2, {r9, r8, r15}}}], 0x70, 0x4}, 0x4040000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) ioctl(r0, 0x40040084146, &(0x7f00000001c0)="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") 12:39:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:53 executing program 3: r0 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) [ 794.819270][ T2204] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:54 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6800, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:54 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x7) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000240)=0x5) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000002c0)={{0xffe0, 0x2, 0x3, 0x6}, 'syz0\x00', 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000340)={{0x1, 0x0, @descriptor="e73f04be96a3ad1e"}}) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) 12:39:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:54 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x426e, 0xfbae039141ab75fb) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) 12:39:54 executing program 4: prctl$PR_GET_FP_MODE(0x2e) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:54 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xffffffff00000001, 0xc00300) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x68) [ 795.404286][ T2231] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:55 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200) 12:39:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x82) r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10040) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r4}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000802}, 0x10) 12:39:55 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000480)) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000180)=""/179, 0xb3}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/217, 0xd9}], 0x4, 0x0) 12:39:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 795.910173][ T2217] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 796.133031][ T2265] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 796.233461][ T2267] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:56 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x6c00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:56 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1, &(0x7f00000000c0)={0x77359400}) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x3}], 0x1, 0x0) semop(r0, &(0x7f0000000080), 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00f\x18\x00', 0x200, 0x8400) ioctl(r1, 0x40084149, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x3200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000140)={0x1, {0x0, 0x1c9c380}, 0x7526, 0x5}) 12:39:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0xffffffffffffff6a) 12:39:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x80000001, "fb0a4cadb367ef2e848c8bd68dbe4ddd0808abbcc8264d875c9e8e07ef6e343a", 0x10, 0x4, 0x7, 0x10, 0x5}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x1ff]}, &(0x7f0000000180)=0x6) 12:39:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:39:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @multicast2}], 0x20) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xfffffffeffffffff, 0x8000) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) [ 796.594613][ T2289] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:56 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) fcntl$getflags(r1, 0x401) 12:39:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x8, @vbi={0x3, 0x5, 0xfff, 0x77001d19, [0x7b7f, 0x8000], [0x0, 0x1ff], 0x108}}) 12:39:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:39:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 797.392853][ T2334] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:57 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x7400, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:57 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) linkat(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x400) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x1, 0x2c, "4a39b21ecdbe267dc15e81fa638a4e1bd07905df373039db44308f834cdab1f37ce4b10699c47b8e7a719441"}) accept(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000280)=0xfffffffffffffc8b) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r5, 0x40084149, &(0x7f0000000000)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r11}}, 0x48) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0xb567823d638ca1c6, 0x0) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x20080, 0x0) poll(&(0x7f0000000400)=[{r0, 0x80}, {r6, 0x50}, {r8, 0x2}, {r10, 0x4080}, {r2, 0x12}, {r12, 0xd29}, {r13, 0x8}, {r5, 0x8}, {r14, 0x2020}], 0x9, 0x7ff) 12:39:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:39:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = geteuid() r2 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r2, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r4 = getegid() chown(&(0x7f0000000140)='./file0\x00', r3, r4) r5 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r5, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r7 = getegid() chown(&(0x7f0000000140)='./file0\x00', r6, r7) write$P9_RSTATu(r0, &(0x7f0000000080)={0xaa, 0x7d, 0x1, {{0x0, 0x8e, 0x40, 0x5, {0x68, 0x0, 0x3}, 0x41000000, 0x4, 0x9, 0x0, 0x0, '', 0x25, '%posix_acl_accessGPL-$securityeth1!lo', 0x2a, '(^#mime_typeppp1[/user.em0vboxnet0-},\'ppp1', 0xc, '/dev/video#\x00'}, 0x7, 'ppp0GPL', r1, r4, r6}}, 0xaa) 12:39:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000180)="151dafa1afb0b3ee83b8ef3b48ad609b3a29aad6d877bbeca834b09813a53c3af96d7f6b7df86267cfdb2d05bf00e3e6c64f968867a9aca295e2259fe60ace03f90cda05b247ec", 0x47) 12:39:57 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r5, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r7 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x68, r9, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10100004}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r9, 0x12a5, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'veth1\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc450) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000091}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) [ 797.788571][ T2354] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:39:57 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x4}, {0xa, 0x0, 0x0, @mcast2}, r1, 0x4}}, 0x48) 12:39:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:39:57 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x462202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9743947e54a764cb, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f, r6}) ioctl(r0, 0x40084149, &(0x7f0000000000)) r7 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x400) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000006c0)={0x0, 0x9}, &(0x7f0000000700)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000740)={&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x15, @loopback, 0x80000001}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000003c0)="9e82225789fd63ae7c5db6b6ba5cf09d3d9db0ed0c7e61ac29c11ecbb8d75fb4b0b7a585cb710b42bcf6343600f7b431d575f8d712cd4b85c1b7a795b3a91064cb052f0b5d85b5332a2ea9c7d6945480c94e9e0d0ae8c4d4600b53e9a642de7d4558a53f406c4637b1288e70bbc6ab40705e44b07dd11bab38ae7e6079d1870a8e3d667c73383b46648f7568df54a5862e", 0x91}, {&(0x7f0000000480)="162c3d41e8d104976ecc72f5aff1f52d8bb304251e0bd8daa4d2cd837a674fad9a381c3e5a29816ced010d7bceb5a34409b752b03aef698a0bb8d0f730574e3540847b4150f6e61cd570fa61d7dace4599d957164ec734dabf725be8455d7097ea9e6bd4ead12151e34b20772c8b0866e624eb1c9b409ab242add03029e8d461ef", 0x81}, {&(0x7f00000002c0)="00272e01fdf3491260a1dee4a0ad557d77a9dfcc4ebb5d65ee7c87632d3c0e56964d28f51862fb1c2ca64377fe9a3107eb60372f5859761e29c6d545f86ff7ce031a241be02529d0b9fe8a35cff836d1c0", 0x51}, {&(0x7f0000000540)="11cba266fe85948826891e2244e39245b0aad68b539325ac3f861ae6a06673bdc7e54526200a43efb8f6a4d7984c420cb6309f0d66adf4aadc4ce117db76a4bec5308782ecd2612b265f6fb820c0a3855d9cd1399897fc633a88de08ec9df04afadc52236f073ec9cfbc64c247aebe001135d9afd65000b4e7af5f2a27ac22e0ce10499fe4839ee1040388d89e5a38b41fbb90101bf11f2091b0652b2c96b4276571d26999d30b9af9ee82fb791a73ca175eb96d", 0xb4}, {&(0x7f0000000600)="eb1e227b78024a7942057cf91b70d427e6a6993dfc3a99609c65f169e442fe2b8e344570debe459b45b164e8f522dd900f25c4ff", 0x34}], 0x6, &(0x7f00000017c0)=[@init={0x18, 0x84, 0x0, {0x20, 0x9, 0x401, 0xf000}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xa49f, 0x1, 0x7, 0xffffff47, 0x8000, 0xfffffff8, 0x200, r10}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @init={0x18, 0x84, 0x0, {0x0, 0x3, 0x6, 0x8}}], 0x78, 0x4}, 0x4010001) 12:39:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x40000) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x40000) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r6 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0xffff, 0x100000) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x4e24, 0x0, @mcast2}, r1}}, 0x48) [ 798.565738][ T2405] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:58 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x7a00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:39:58 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x349040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x101080, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x2}) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) 12:39:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x82, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x84) 12:39:58 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) lseek(r1, 0x4d0, 0x2) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:58 executing program 2: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001500)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) write$9p(r3, &(0x7f00000001c0)="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", 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000001380)) r7 = socket(0x200000000000011, 0x5, 0xff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r8}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r7, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer2\x00', 0x440, 0x0) r10 = syz_genetlink_get_family_id$nbd(0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r12}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r12}}, 0x48) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRES16=r5, @ANYRESOCT=0x0, @ANYRESDEC=r12], 0x3}, 0x1, 0x0, 0x0, 0x4984d6f2dcbc20b}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001680)=ANY=[@ANYBLOB="28000000f9ca4bba43e56d0f331f74d0", @ANYRES16=r10, @ANYBLOB="020627bd7000ffdbdf250200000008000100000000000c0005000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x800) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) r13 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffff, 0x202a00) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000011c0)}, &(0x7f0000001240)=0x10) r15 = syz_open_dev$radio(&(0x7f00000012c0)='/dev/radio#\x00', 0x1, 0x2) getsockname$inet(0xffffffffffffffff, &(0x7f0000001580)={0x2, 0x0, @dev}, &(0x7f00000015c0)=0x10) ioctl$TUNATTACHFILTER(r15, 0x401054d5, &(0x7f0000001340)={0x1, &(0x7f0000001300)=[{0xfff, 0x7f, 0x0, 0x40}]}) syz_open_dev$swradio(&(0x7f00000014c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r13, 0x84, 0x19, &(0x7f0000001280)={r14, 0x5000}, 0x8) [ 799.020368][ T2419] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:39:58 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0x80000001, 0x4) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r5, 0x0, 0x80000001, 0x0) io_uring_enter(r1, 0x4, 0x7, 0x1, &(0x7f0000000080)={0x4}, 0x8) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:58 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:58 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000003c0)={0x2000, 0x1e000}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x19800, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r10, 0xe9b038d1c8b8214d, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x610000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff1d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000002}, 0x8000) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x101, 0x48000) r11 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x0, r12}, 0x14) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r11, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000440)={0x43, 0x4}, 0x10) r13 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x1, 0x202200) ioctl$KVM_RUN(r13, 0xae80, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) 12:39:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:39:58 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x9) [ 799.509235][ T2423] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 799.758924][ T2466] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x8100, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:39:59 executing program 4: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x0, 0x200, 0x9, 0xbb14}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x10000) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:39:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:39:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) 12:39:59 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x2c) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 800.234265][ T2477] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:39:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:39:59 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6b52, 0x400) preadv(r0, &(0x7f0000001740), 0x0, 0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) fcntl$setown(r1, 0x8, r3) 12:39:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1, 0x9) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f00000000c0)) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r5, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x82, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e22, @broadcast}}, [0x101, 0xaef1, 0xfffffffffffff920, 0x7, 0xfffffffffffffff8, 0x0, 0x5ac4, 0x1, 0x5, 0x1ff, 0x15b2, 0x7fffffff, 0x3, 0x8]}, &(0x7f0000000100)=0x100) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:00 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x80, 0x800) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @local, 0x2}}, 0x7, 0x0, 0x7, 0x14cd, 0x4}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r5, 0x400, 0x5, 0x1, 0xbbb, 0x9}, &(0x7f00000001c0)=0x14) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x40084149, &(0x7f0000000000)) 12:40:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/107, 0xfffffdab}], 0x61b, 0x0) 12:40:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 800.818967][ T2472] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 800.986307][ T2483] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 801.024907][ T2535] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:00 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x8803, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:00 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 12:40:00 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x90) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:40:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) fcntl$dupfd(r6, 0x0, r8) 12:40:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1000000000000a07, 0x220080) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x89) prctl$PR_SET_ENDIAN(0x14, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000001c0)={0xf0c, 0x4, 0xe14a, 0x42f}) mlock2(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x3c, 0xfa00, {{0xa, 0x0, 0xfffffffd, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0x1000, 0x4) [ 801.447361][ T2554] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:01 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/170) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10840, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7ff, @loopback, 0xffffffff}, r2}}, 0x30) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x204300, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x1000, 0x3}) 12:40:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000280)=0x1) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 801.570236][ T2568] QAT: Invalid ioctl 12:40:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000180)={0x7, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x5, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffe30) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) r5 = fcntl$getown(r3, 0x9) ptrace$setsig(0x4203, r5, 0x2, &(0x7f00000001c0)={0x7, 0x800, 0x6}) fcntl$getown(r1, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 12:40:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:01 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x5) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="000027025d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x82, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r3, 0x8}, &(0x7f00000000c0)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x82, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000440)={r9, @in={{0x2, 0x4e24, @rand_addr=0x6}}, 0x59}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r10}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r10}}, 0x48) write$binfmt_aout(r5, &(0x7f0000000200)={{0x0, 0x7, 0x9, 0x21c, 0x3da, 0x3, 0x29a}, "8f82af2fd3d55348855f83d0fc052c66ca320f39478e63e37f647ca5760e3ace70b397913be5a6a0ea8a683fbb18260121328cc92d4e3576921b3f939769638852797acd1b426c437a012ae1ea1de7b529e371fd39ce97a89406586b198b3d7cce08edc8d70dbcc92bdd02af6d9537d418f9004f9f0202729de3e1f405c923683af2c2fb1520a99b86598b"}, 0xab) ioctl(r0, 0x40084149, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r4, 0x2, 0xacc2}, 0x8) r11 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x0, r12}, 0x14) setsockopt$sock_int(r11, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r11, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r14 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r14, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) setsockopt$sock_int(r14, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r14, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r13, r14, 0x7, 0x7d, &(0x7f00000002c0)="2c07cbd5044da7338d897f05a77edbcdd2eb7f1fa37f218f8bdbbb3d8f7b9caeef35e18f7821677f7ab389b4b71d75e80812fc61997ee0b221981ba50b7b4f4f66596a7ffa8303e40bda2d978c11a9f0cd0c2401a08adfb50753b50d380c148d6029dd5813cb39fa6a562fb4712b273bf6b9395f6f675ea614e4d7b8d0", 0x81, 0x1f, 0x8001, 0x5, 0x2, 0x1, 0x1f, 'syz0\x00'}) [ 801.924405][ T2543] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 802.188860][ T2615] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:02 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xa087, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/\x01\x00\x00\x00\x00\x00}@ni\"a\x06\x00\x00\x00\x00\x00\x00\x00c\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:02 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup(r0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000240)={{0x1, 0x0, @descriptor="cb8b2335b58e52cb"}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) writev(r8, &(0x7f0000000100)=[{&(0x7f00000002c0)="390000001300000200000704000000000000fffc970800001ae814000a00"/39, 0x359}], 0x1000000000000033) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0) ioctl$SG_GET_VERSION_NUM(r10, 0x2282, &(0x7f0000000080)) 12:40:02 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r2}) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r5) preadv(r4, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 802.625688][ T2640] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:02 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f00000000c0)="bd38832aa0da3ed709249f2c8e21", 0xfffffffffffffe70) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x7ff, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40084149, &(0x7f0000000000)) 12:40:02 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='hfsplus\x00', 0x4000580, &(0x7f0000000180)='*{]systemkeyring') 12:40:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 803.424576][ T2685] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:03 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xae00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:03 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x141400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) 12:40:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x1f0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0), 0x4) 12:40:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r7, 0x2}) 12:40:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:40:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000080)=']eth1{proc]#eth1security\x00', 0x4) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:03 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x7) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 803.888282][ T2709] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3f) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2f1ce68fe78b6d73) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1000, @empty}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 12:40:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:03 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x814442, 0x0) 12:40:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 804.386686][ T2693] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 804.607223][ T2746] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 804.821032][ T2749] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:04 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xb602, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000100)) 12:40:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r4, r4}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) keyctl$unlink(0x9, r4, r3) r6 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="d4772a5242070e", 0x7, 0xfffffffffffffffa) keyctl$unlink(0x9, r4, r6) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000000c0)=0x1, 0x4) 12:40:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000033c0)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) r9 = syz_open_dev$mouse(&(0x7f0000003400)='/dev/input/mouse#\x00', 0x5, 0x101000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r11}}, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003440)=0x0) r13 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) openat$cgroup_int(r13, &(0x7f0000000700)='memg?\x00\x00\x00\x00\x00\x00\x00R\xab\xa2\xda`\xcb\xe1\xb5\x17\xe5\x87p|\x14l', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r15 = getegid() chown(&(0x7f0000000140)='./file0\x00', r14, r15) r16 = getgid() sendmmsg$unix(r1, &(0x7f0000003500)=[{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000300)="672844e83f540665a5c291529b8dca0fa4466782da4fa139ac76ac2c81af8fb446b93c6b059746ed86b135b0ad04f760179579fcd0772ad3eda23c42d7a720b40ddac7924501307ed8de26fb32660ab9c81ffdaf89d1fb8e673dd0b8bc73dfdad239828e5ea514f610cdaa7e0fa89bc170f81786d2b4fb4fa329cfb7a8c123505cb2e399dbbe52b01c1d2db04d0481cdc200ec82b87c254f2bf739983e4bb0459a3942c8bf3ba4e46792f9dfca78f5bbbbec36ecc290c91bbd4f7b39b95f07f4df239f392f4e4a61216fe3e81f44bb10c63dc46d7bbad171", 0xd8}, {&(0x7f00000000c0)="08931488893f9ec5f4fe1627f96c416871a88fd257f86c76ac54054529404cb11caefc5ac04e4675adf4c14009486c0d27c3bff4966e22e1026245a83a87", 0x3e}, {&(0x7f0000000400)="b67267148742e8542f5da506a8edae35eb00fe8622cd132611d6eee917923f66061aa72b66bbad3990b65a86f228c76935214a46d3485269635f13437134f83318f25b62d00f2eb0314e6a5f6d8b39f9964e557b0a27ef963743c13d4fb6ab3360c17b75ddd31367ca953ad67dd6b65aedca6982bf84bc692eb170612d2c9be461d04d0b13804c77278baa3d35f938b491c199b4418353245239fef0c5256c4e21e2be67a8c5fe7dfae6553eca956867db66855026ac5fcb0b70c01e035a173b8e07f482d6ebdde524556ddafa627bf9c3e3b5038050a9fbec0fd5d8fb085e15561437e556b0efef5f78a535af52b477fc4ea8bfbf80fe70145cc29711616a0c13a94fab494e268a23c5723e4934457b061720e4b18117cbb25bb9901cbd0bfbfb0df692981b9126f6d3c8047e4afca83304876aba93ec6ac4d638dbf477cca4964bf9b16e173192bd69c4b806028794c1e20100a9379209ffd38817d619b7baa826039b344792f42d7d3147ee846759385821930a56cfe4dff5682778ba188d010e7e775d8716016b5e30493f5327cd4a6b89162a1130d6482219117a06b1f427719b6ceec311b1c9672f0ebd6fa37bf6bda32f60bf4bd031f636f9679a4c1129ffb6e20209463a8a5e21dd3b310b64400fd4b782c36e95624aa598d234faba4574294f3cc219693791f33d6af4e8288d4ccff3d18c9cb17f299463842a8b6ed7034388e35fba2ebe5ebee406f4498950ceba16e80dbba245f43714cd873cd9908ea05f82777616e1d95525d2842fb38bce64efff0fc7e62b3bfd08513067aba58dc5d5b13041e02c05df8047019e8f648ae268d4501a93d866a34c5b2a453d0629f78942918cc166a4d93004854ea3baa7ac2569486da4cb1c6648da2eeb6d73df84874eb8905f9b3a7b5b5040244eaf4c5452c0b0f07a617ea2a17e388740bfa6ce5a2559c16125b382869cb30048437deda593dd5949f58aa47fc569a3033d72328002732716666cccb3cf1ef43adb93827666be7375ecfabf4f09d6166d358d1be838cf3a95210c87da920ae88b7bde296ad390e66ba23581b962d642090b4cb378b8cf0a9798d5675ff8ed9266d45c546934432ac69f7f7cc23e1d2fd89145519102c5f3e0f7b2cf3177498100bc459221af2c726325b7b2502e319a86c7c3b3baa0effe275fd170ac5a06a763f94e4d8456afa0563def9df0e1b10eb139b3362cb6fada3d594aa5ec80a0a64b54270da90a595d3e1d1f35f6ee10804ab0b13a4441fb6f64779321e593d7d71f72fb4a3e1b3a235535d3156fd21de4ba99a8fdc369f142aee32537a8a405cc4923c1a77892b863c034adca58a0546da96f471821ed25d287c626d293032cc2db5b5e053dd7d157060bce93446de8acf6485a0be0fd7dc0ded41c43fea231a361d9bfa446f968a682b73a1d01e044ff10fc174a172de541b0d3d2433f28055239c6af7b143704a03c8dcececff945febb668a3f56737a7db524c05db8f44a8270e866fdd354705b552a9d4ba1667103c674e594cfe3c895a9f418f41c44165a27d297b684473da07e50f335f5d7e6747e673dd631e310de5fb4fcd3a3e42b3b5f80f4c91f3a719c1f32905f7274bc7936daf5868f2081703e187245087a1ec40b1815a1395309e19b9f759c7315fa827cac38d0fb6e5c1b4f5a15535d7171ac48457c11d21384851b15877293d3e942d3731b4ae90a1e79ca650edecfddeff727501b6c826a5ac99ea32d6eadc2ef9a36bbe0e654f56731f240872ae48592365b429daccb90edf7215c76bec1362a716308a819ca9fbac9cb363ac1bab4e18d428de9bddef5862e363b785108a8cc0990abf9307d875e1a07a859829eedee7fda4fe900a615e6f069afe30f668e0ab7b7fe034e35a38f067d61b177ddac4ffd7fa59d4f6860ca3438de75d156f387206674850f6e5452d43953b8522de26a4c48dbbba60b740ed67ddf31bf11c11404cda4d185cbe42e5194d201c2d6bbf5bc367b6d1636bc93e495f5cac3733a14a48ccecccf41295230416c1022f779bd5e7ccafabc27ab0fb2593ef806350e7f23e6fc7ba9c7cceec1de66ba74f233793597fa80c45543675d96e99b04cddf5e3aa7d98a60ae7dd9bf4132c5130184990e0d31051e028f19bc67c556f7fc01694cd004406016bdd39bdb47941f63c603749424af20ab82037bfe790092610e218afc89a60baa03c70ef55c0e0b55346ba865eeb136074fdf6526d63c9ef0869ae5c7345ac9fe23d5c4c486f3e2b298326b9176a249479d4912bdb77fb25821ab5ffa96f0b57d4da17a070b21b5fa5c46c0e715ef994772f58f610722874c72e126b3d21a121986f2c3fb3d3ce9b35c4484ec33a1a5d93c40847c311da22948bfbc311b103dfaff523cd8ade9e70889943c76248450177ec9d08134a105f9dded3bc5b9a12ca038896e6755119ceb614adea4dac59ae339690ef36fc52de9aeadaf108c8110e5d6b3a675092fa47feca46953bc7ac4b4b75f745eb6ce3829fb0716bb4502018c5eab68177c19b3686eaeb2914d1512749a42eeb063b927f34c09d6e7b06f992bc9fbcde10d58cf70510649da17f6287605cd65b222cbbbce44cfa26345d5052c6f80d1a6ae00202382bdf52865e12559eb1af6213a45b519dd0a9674398f6ce902671448f879396739aeeeece453ceaa037bd8b67f5c295ec765d66be0456d21a68dfc37bb8ac0753bf1bb759cd3c027ff765c73df4da378be14fc82ef81d6496842bde52da9fb4e78453f61ce6b789dc4348a1a4e7f40da8faafab0fc34f3a56a5302233987cfe8632a35178060aca1ae0e064e9915235dff651783765f917f118bfee0f5329be9de6be32b7ea3b8cc78ba489c40cda2de949030381f8cbbed06e8a0e16ed8c6b1e65984e1b50129ac9c1104a70f834fc2e89194ae0cf6dddf625c21546bd7ab5b6c82a0d06874c4dc922692b77c1225afce8bae236578a4a550c40e977736cc3f6852dcd46864d795462be797fda5fc228dce8df968c5f8e22c87f53eb55aa87c1c519fbb23593beeec7d658e488ada4889c4aa7892f0fed271127035c48bb15ec96fcbc51d174dbc000cb3d2745a7a470f20b9f0cf66d1e3fcc43ae366c1003baa2aa5732539c974927b007565e0021cfad740d65283e8c53f3f3c953c037a9c214f9110a0967b659af9b50a46c0d441c98ade083293793293710a448a83c880a284514a251c39cdc0950730fd975be4a99a9cff3bbc9db71eb593f68627d52c73d00754bd70a43ab7d669d58374d2a39f221f3e82e2a161350a795ab8ab6eb00dc7356f74a6d916497050911a98c15a081c932d52795a9b90399c9ce62191115338de6a9d2a2c5c05c522c566b05fc8477e0d21d76af13640ae4364b1b00e6bd04060da0f7b3992251b3858f7dc4df585f2394f2abc8404eaba5e73e618fb2c4fd39ec26fbb66039fd6c493007f5af52d6cd2119a2344bc3dd2b361d2957efd0504481ed1f4bfbdfef3e575281cdbdd45409ede039123cbdba7c3f8ee9f473ccbe8c3242a202dec4117f6bcf265614101f7bb72550db722f29731709407360f3384ff7adcf3ba79a8efe4e9922efb87949e0741ccfc65a2107d7b34daf9e6d32ae8fc6b6ab45962eca9cfe176c60264d76d810389b0150e8dbafaa35d525c36ced439a09e2f834f703c59126fdc096e15244aabcf0626eba2485045c3b6829fc6ec4712d00a46d356d9d5dc6989ff25a28471fef759183344a6a6919e2c614622cc60c32200168d47445653e70073f6fc65ef6cd1ec5b9bef4670a330a337ba7825c3a1c3ef99172b7d71db850cc7cab7fdf6043a1361b6c7ae6e3cc9cdbfc24709403b7572b88be82569b007cfb70bcb93feb1e4cad7ec45f3319acfd198f72fe5fbc1383e800f4941360c83c9e8d1007661561428f39ffeb14dba48a3c42bb0cdbdd88aa2cab72fa669a5ca0e4f452fed75cee0aed7b73ee3d24bab9269a6b239112c7b9670f81d10f3e115dc15e0aa6abf4fef527a99a2283f0ce5f06223b3697d22990515b00742c44164319425c0acdd6b33186116c17b80e395385cacf2676f6fc709d4e680a9784edd1e9a2b3a62eb83ce6ec26588e9cf5c033eb672f6a9d82e6e9b93cf09ae7c2a0570cf0068410ae3a5c4624c98c19f0fff55b080bd31d56413aa03a50c3fd88a3cf1fe40d60b53151a1e8a2950c71958fc171d1a039668932e676f667cea73d4ec29950741552a17a566a8f8392c891b61153a874c2b6e0e2d1d5cfd077d4c29771dc61eea6834267ebd426acaa8b41c247ef537a49f38d0117b2c9276c3444e3aa299f29782de58fbcf5f088ae2083c3a480b544a780b47c3a06cd5aa2358fb678670afe7501714be9e624ca0e108e2805d19e0c96e8ee9701d3ebbb198e431714631641b6edbd32f5127084739b358489a41c7aabf26ba5eed920a06a564121191c0f04afaa93c6b2cabe464fcde5247c3f2c41337ce563727d0ae0e58cb462206a28de078ac62de83aa20890451d97c61a69dd5a2e1a9122814d388f1d30feb09c4c6a508dda46a3995a6ed5d849b40be91c42d1d1d232060f1e00226a482e1fc3cc09e74945fec479ab40c227c12004e6fb7d3a2184d18bbf3f03d8f7f711bd40c37ed3b983ffa89b94c4477217dcdafd83f43ad0af81517d46ee73b843a28ec49ad349aa473e37231f340e4ff0e1bfa65e1fbd8bd53cab45a472df492100cf254d7e7482aef119b8cb1c9dcbe28ccff7d9f94e3124f523eaeab8dd6ed8bab682e19572ac5a31263bc3c6dfe522cd53671e131d8476676fa0856afb1de7d6798df71b41f8e076835a4d0edd9f010a57b37722a5c2625d2dc25c9f457ddf32f5da49d2ed386bda8b1c072d64e64b036852956f65d9a4667f434b2634e45b50b10876749b30e14c2733fd54e09d5694748b5b62e1478a4ad3e1f164f66ab61badaeacb2618a0ec92e2c57acad282a8c1976e336977a202fb8016a462884d8282d04fd7f8de85bd117b088bb1dd9f7fc7cc55ca68c29fabe9fe2fc58b1c025e6fcbefae4a97c32416a04125360194805146064c449c2dd2db53d9addeb4b9ec37b001a63626f063b972ac9473b70ff325477aa1035656570d6e98942f15063546931d6808c809900d95a9785442f3110aa19fd2b98ffad61e3ef53200b14c8ccf6f28096310304336d5029338b7ed19c673ec29eac06751a8d50b4ff445d45796152b1ec24170e5c33528c5aafd395d50493e6d0bbdbcf6dae66d720bbb7fd6f667ea44c5d231ca978efc7beb16a78e4f4dd83127706d6d02557e467ab31ce6fa073900b1d851e4d1592283122eb9f325ad9ffe03f56fd8136391d4d29518a5ae63244fab16da8186a6a0a0a9b362c9e4296e247ada8797e6264f907d85ec8a888b92fad246670ae57fa41c2210b8421d008f1ccc68bbe4850881444cda84757d8e06a5c0d8fc1a1a7508e5d05ac6b93aa668d5484e74091ead62ea24f3282ac8327e67dc9b9551e1c6badc0c5093d3e41ed2611512c01fa8e10391b4d87c1cfd544fd36c5d03de4950313617ffc06787345024e12163faf7911c2f87cbc7fa0c1b4bd47214af78ed3586d42cb26da15714b5bf02d591c32372e1b69c9788e5c57f629598d161cf5a9723da705de7550c68481c1d0d39a7c5a0e5ac2cca940f262ebe8d51b578d6a3a7266b1f6bc4c262317a635cd8fd24c0f62217dbef21e950c94acdd189b21789d4d6672237454f2ad8ba1bad465d4175ba5804eeef696eda6b91b8d888ef4a", 0x1000}, {&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001500)="7236441a967db8bbb39db82945f5f29f896c7652b738e93b0c3ef399612fbc6e6c88a7223cc19720bc05cfaba44568b0571f54e0307331a9323b6d87f7e4629d3bd1c31ed0e8c173f8aef83b3b65f2acd4b8b699b34efb7b8a18ce2d91862dfef52dae56b151cc022ef09886b3bdbcdf402d531416bed75c6aaa616b6cb44a543b08cf6bb28a269d805d23d5bedba3cad08e4a830fc1871fbfee99eac01a4d83a162d6067d06ccd206d792cf492b0e805c5e9f0e74aca7e7d639be792972f1d03f87e2234b2471eb145953cd90484801", 0xd0}, {&(0x7f0000001600)="e92b14f077cee8cabcfd31f456328223cd1f951b6f8c4d52123690e0333a9f59639dfa13f29524d027ec5dda2522d1b73e0af71aa4fe313a8c2686d695b51e630eaea5a4e77940ee6da21c9899c5f58be216799b1bb5709acb9785f0b390836497442512616a8ad6595ebccf3d87bf428c267f9e09634de8b4e4395a1df63fc0b2873fc22c04b186802b857018a773520888e72139bd4b281917a5d03293e9b07dc8246ed3cfe42605db018407618c4522975ccbc31edac8c447", 0xba}], 0x6, 0x0, 0x0, 0x40}, {&(0x7f0000001740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000017c0)="0fe75be5b57fa5a19e24cf6b0621eaf88796f1e768420fac8869a958a907a514ce4f72b20f433cfac59ba42552adb6ec2729de51a8195676331d139329ba187a20e86d56b5d3c990ec49d65e78d5e9ae1e6f97e90d30817843b14a63cf6c", 0x5e}, {&(0x7f0000001840)="465d7429c1bb5016aa5d87dd96039dc9d4827df20a28b840228da774c3c84690e0a67fa57151286bf215678858ded9705d9879e4b757a299c11564daecbbc68468e2e4996335b326e33ac7c5d909cc533b59563040fa76c9bcdacc761d25fa851ec5094171232e77b0e48949d4143cbb3b0bed3f60442bd99e90cb4a43b2db27b66c7595c905fefe8b61c0a9aa02894c32c447d5096f0e5e141d4c56d4f03582ba7e0a5cf07b42beead3a99d5f3c608cbe3e0c378282d49136aa8329c2002b26dbab08a63f9f7a56e9d5160df45ce01c9eba253d35e1bd58e9716200f678867b71acee1230391564cd07d3ae763eba", 0xef}, {&(0x7f0000001940)="ea5d82a5d0677f1920898755450cbd7e0c96b41857b1022a73d6c13ca9b2d169a9999aacd0a96978edd025979c9584beae92e281f6a10ade8bd9691afac9b4aec614c0e1dd76be054cf7698b1879c9c13573f8a9ecc669e902c1b511dd973ca7eddcb40733e4606f614d9b6ebfeab64a08fbd52873b6b8297de90eb7ebef1000dc83dc8cd99f117b7c0e3987a5bf1fd34f1351c2afb5aff8ee871a81399b694293f434d3684be74046f903c7f8c90de54c86983573bfe59548d2c7ed98a8d5c207f27e29388de604eb4f6d91d0493d3b0631a65651b8b83c8584adca62b76bfd43647102bd541fae1c7a5c6fcb86", 0xee}], 0x3, 0x0, 0x0, 0x8080000}, {&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001ac0)="19d54da137dda46a032343f437ea1f417480", 0x12}, {&(0x7f0000001b00)="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", 0xfe}, {&(0x7f0000001c00)="1527edd7b57a9eba13e242a0a6b888064b26ef20b78a967168c8d75bf2a9b449c1aecd93ed5cddb08fc0130d8d307363e79701febe821b894d7e83abbf33d12168e63eae", 0x44}, {&(0x7f0000001c80)="6da60576262468061d49837e4d22efc884a47aabd592d28d9d4a6b5b68ad87562eb9728eedcfbc511bc71f941a307275cf38075bac1ffb7a5ba4662fb27cb6d101", 0x41}, {&(0x7f0000001d00)="068cc1c48d0cb0b057bac55acdd588eb207842496b2990fe5dcb5bbbe7fba18ec2bad17e2c60ecb5f5c5b759179b191de4b083b64a62df06f04cb264ee7f874708696cdfa53dcd292586dee8370ba14a70245a5bb8d5c7e1d2bbe989fdd95a8e", 0x60}, {&(0x7f0000001d80)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4000010}, {&(0x7f0000002e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002e80)="1d2c7b47d88510d212766cee959f51ba741908632e43457e2a4bd6e7d3c3daf4a123bd403714eae4b9947922ae645103715e6f862c78cc30731c6da75af9f95ac0433e67ab91e540c26f0cead20576001874d0b471305f607fac565de95b2040d6a4062a7e364897980dcb4273548cc99477c86830bb14b116be5827c5e160230987bebc8d897847cfb8932bee7a284dca7a1f4aee0bca6ecfc54a3de603d09a16c42204e34be148ceb9cae0b23c145a95b3857899d4d3c82cdb1c26ed9e4ee83b04e4c5f02e62c030124fdde1545eec40eb", 0xd2}, {&(0x7f0000002f80)="db1f9abcd093dea183469d0aee1826f80e4b8b9334e2de85091ef18a34918d269a89b55a3182d0dc898d886cc648c3568a2e7bff4694c38f675a6888a8e445296cf490d02cf499337b5bc24d9b1d7d6523a89cb0f7604b61c0b8042a282dc61c39baa6948a89656600426e74b5e27f4714caa326489f484037eb2b7d62b2744287d92555a88f65459c76e241436e5269ce6862", 0x93}, {&(0x7f0000003040)="2e28dbe7f644e29118f3e6ca9c6bfc4be0e605cbce4891ff494cbacf7970ca0f63d247a410aeedd26fd8a4776ea1e724e0e46c79e5f54d8bbc7486fb02406d4fb0730e6c0bd1a589021741ba91317f107a0500de07156f37ea8a8dd5ccc2f30112f19a8cf764981007f98ab3a390ea27d8a9f01bdccae5e70517be1064dfec74a3e2af4eff4c52eff26b83cd8c214a68c64ffd3174ff813afc479527dcd993409850", 0xa2}, {&(0x7f0000003100)="16696103f6eccd2809121550a143bf1168f08f02a8d4dc634c25256a854330c5f0cd498bf679160f169602133ac156ca57edff754f2f44636440a3f08eaa0d5cf309c866368e39a1a9d42976a092090858f8aa8af95259ec9bc19725059756eafb49a69d96ae4c92aefc2b75f103d089190122c82cdecb8430e41efa4538093d2db7182bc118ea4395de72695dcca16454ed557e01bee53adeaed2f6e65a6d9159c602fcecd4", 0xa6}, {&(0x7f00000031c0)="97cb380b944e43afd8cf083960d9529ffcc283cf92ca737fddd868a59f3eeb8a1a1bc7f351bd967f23549d9172d2825b23151552d23ee557e930d510e12ce02a2a2a5ba6b34965c46e56d23e4ccb9c46eb2b1b026357c62784fad4d11b5e53b8f6b92d369e4f78abfb2f523158acfe3b59f0f7a4ff30fffc2e1f22ddc76e9934e003c7edcce13bb308f3429a4105aa44f875881d58b3e0ffe97b250fd9e59e95e71180791c337a233bcc1ff1650a38", 0xaf}, {&(0x7f0000003280)="b8ddfbfa91b13c3ed4f7ede32a198f5bcaa06159a38619c70cc03e4bfd8a0f478d36aa07fbb247c73f02e6845f0eba4984fa87a67df210375f3f8cbb118b3526b2a148f81ec706619805dbe33ae36d1417935c3daed5c8186bca54370cbf52c5f414f38b932640f0c3ee03fc444eeadda8899b6112047e2624227518afb69a7dee0e97626c8452922d4208e0746a8004fa82ccb73432e2a5", 0x98}], 0x6, &(0x7f0000003480)=[@rights={{0x28, 0x1, 0x1, [r2, r4, r5, r7, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r16}}}, @rights={{0x10}}], 0x58, 0x1}], 0x4, 0x4000000) r17 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) splice(r18, 0x0, r20, 0x0, 0x1420000a77, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r22 = socket$alg(0x26, 0x5, 0x0) bind$alg(r22, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r23 = accept4(r22, 0x0, 0x0, 0x0) splice(r21, 0x0, r23, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r21, 0xc0a85352, &(0x7f00000001c0)={{0xff, 0x3}, 'port0\x00', 0x3ceec1d228a70931, 0x0, 0x400, 0x9, 0x3ff, 0xdb2, 0x5, 0x0, 0x8, 0x8}) r24 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x1) ioctl$TIOCNXCL(r24, 0x540d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r19, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', r3}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40084149, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000000c0)) 12:40:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:04 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x9, 0xd895e864aa1e9581, {0x1, 0x1, 0x0, 0x3, 0x9}}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x98, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000180)="98047b3bd361f757f08842ee3e861a5b9c8d6cb455d6d849b427cdc8e017e75e12a5eede4b6d9c3ec5445d58e180afb3c7ce3c2c5ed7b43ce2281e8b72c43f66eb0a020f531225efb526ca75e201e0941b823ddc2e267aa17ef353ffd4f491035a09770cd8b12b2c55b6e14334b1b059bad8ef91bcd6c493d4f94d4b28a6c2f53c5319acb2b73025593c38", 0x8b) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 805.169192][ T2774] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:04 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x110, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1801, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2b}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x1, 0x1, 0x38}, @fda={0x66646185, 0x9, 0x2, 0x18}, @fda={0x66646185, 0x6, 0x1, 0x1e}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}}, @decrefs], 0x73, 0x0, &(0x7f0000000440)="c5f22f226bde96706809f22c27b22b19a63c44bc64b7c942ead3b17c0cd2906a733b3e1a14ab05fa6d6cf8f84170e5647063829e57366de7f1a371840c8df12be6c9532a5a78513a6e24d44ece45dfd0f31230df620d9d339f794be30cee16c50a6745e23c46f6528171f9ca66d644420d5c1a"}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0xd288, 0x15e}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 805.647058][ T2781] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.839289][ T2815] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:05 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xd203, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xc0603, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x1}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r3, 0x9, "e9359e", "d394f203647a7b3b159178e6d6fa680482a6753770b867a44ac880f525c4df5e3ddb35a7b66c01a0eeb5c179bb8578bb873bab0a3c788b89807736d1cb52196e070c6a155833d7f4c70206012547dcac7bf2c46d4111bda567ec96a15204318d1bf21831b5ad46fa279f612114779f056e9cebe3107fbd54ce8f6c6f8ffe369fa5b783c228cc16a97794e130aea4bcd81a637a69829ce7665ecc789cb21f000000000000004e951aa99ffe3feaa2dd576768ffee973d89fccb9dad466f0d2b70f848e93ceefe93f90f081ac7c443fce88a3ae64e22a6723c79e2e0c50a96ed16cd81bb0b0fc4a8c8dd546537dede027162cfe5d76c00"}}, 0x110) 12:40:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0x8000) r8 = fcntl$getown(r4, 0x9) fcntl$setown(r7, 0x8, r8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1154145ce1b80900490c0c991e8a7fae8597aef2c91af819f410119509b12f872d4a57d28dc71f89b24f3ec643a3771bae74e06091a13bca6eb19eff8b3095ae8139aa844383357cc6fe38352bcf1fcd67bef6fb0c7da441c739ccac7267205a478424e5c80b56e35659bdba5cb776b9ea4c0642df0a1deb2892d790bb7cc3f20646503fae9e74c28c1b3878553b9a841e577d3f57510dc46a590c88d97c484042a3120c863a00e2cfb76720"], 0xfffffde5) 12:40:05 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740), 0x608, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 12:40:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:05 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='d\x00\x00\x00\x00\x00\x00\x7f\xff\xcac\xf7\xff\xff\xff \x00', 0x9, 0x80000) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) r3 = socket(0x200000000000011, 0x3, 0x0) fallocate(r3, 0x12, 0x800, 0xfffffffffffffffa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000005c0)={0x7f, @local}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x248, 0x14, 0x40, 0x70bd2c, 0x25dfdbff, {0x5}, [@typed={0x14, 0x24, @ipv6=@remote}, @typed={0x8, 0x35, @u32=0x5}, @generic="8f1c82f8a16481e9bdd54d151f6dcc3ecda53095fc4548324b144e83936d1cc4e943de41b18b80e0a95e9b9ecb34768dbcfa5fa1dccb226930aff591fd0704ef90e9d3e3dea5c813ba9178613814cedac5d03b69f077b16a1ede1b91c70669571cfc7ce235dd6461f8d47cf8ecd7b13e24086888efcad833d0fbdcba97b1cb2b2a505f92ef3d11715bb92955796a8b5f2f5a4d6b6e1a84cf24eab3f45a56d2cb1cd9de07953510355670d6d6840f7d7c12519cade4b27dc1cc9ccf37b78f11c7d14119", @generic="f39ce9bfe7e68ad14b84beebc32ced320b8a5c4b39746db12f57039dc697342f7c968368bf046b73a299a83148bbca8be521f1831f09c9f2336a4943caf3995b3612b76deb2534944c484b8576c186de0c30fe09d5603dfe7df62bc484db9cd4888be5c7551d9612e44476b26e67e3ba3178bbc323cf9c4b3247af8d558cdf7284255903e100fc3e698a84b821c949e6d5fa0a8244f6aef079e90c7c74103d67264f8a641d8a86606ccc729f254718bd8ff907fb0c64a3b598e346da099277612e0f85255245773f9aeaa393ddfbcd65", @generic="9f41c0f9bd47ac66b3b61cd5ca40789fe5f8510ee7315982e4f1ce9eb3363c09144610e439d321c3407a224156751f57b9dd72720f3449e1e6705e3bfed466bbbba6401878080e8264e8fd062343336b7c8e5ff050a9b7f17849f0a836e4a68a2e4878dcd4ce7a5d1ae58d5a9e53f0b0566347bc46c39b8ab05f83458942c1a2c11e68"]}, 0x248}}, 0x24000004) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f00000000c0)=0x1c) ioctl(r0, 0x40084149, &(0x7f00000001c0)="e27af828c4fe7aa4af42da8ffe52aa7c799a83046f1796211e09dfd419084cfb22aff99a9cf4ca6c1620d48775bb512fa6b3c9c6f12b6bf8a7837b9d48af0602c51bde43bf92f22e18f3fb8f55a3d13be2f8d8667ebf19a0cac770fbb31bc2f90000000000f3c9423f57c71aab4856ee1e317ff9169cd8a6872b1f0de15e1b0f20034d9311fdebb6d64551a416941aa78ad1f34a2700aacc7237abd91e33229e64df32db032e3f91533eaba53212107820acc92502602999b36fde27f1225fc236ccfaf98c97fd79d66aaabbf8decbc65b696cbad8f2000000000000000000") [ 806.289007][ T2839] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, [], [{0x6846, 0x1, 0x3, 0x40, 0x6, 0x6}, {0x7, 0x1f, 0x0, 0xfffffffffffffff9, 0x200, 0x4}], [[]]}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x2000001420000a77, 0x0) ftruncate(r4, 0x9) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = dup2(0xffffffffffffffff, r2) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x6, @mcast2}, {0xa, 0x0, 0x0, @empty, 0x2}, r1}}, 0x48) 12:40:06 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 806.782812][ T2865] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 806.998386][ T2883] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 807.282306][ T2862] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:06 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xda00, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:06 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/d/pcbC#D#c\x00\xc2\x00', 0xfffffffffffffffd, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) ioctl(r1, 0xcc, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1000, 0x8, 0x1, 0xdfe, 0x1000}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) 12:40:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) 12:40:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:40:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 12:40:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x3, 0x9db, 0x400, 0x1}) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x800000, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0xab) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @remote, 0x1}, {0xa, 0x4e21, 0x80, @empty, 0xb8}, 0x100, [0x9, 0x1000, 0x31bfe65, 0x1f, 0xbd8d, 0x2, 0x7fff, 0xdd]}, 0x5c) 12:40:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:07 executing program 4: socketpair(0x2, 0x3, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x82, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x7f}}}, 0x84) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r4, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 807.529336][ T2892] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:07 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x20) [ 807.597089][ T2908] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7fffffff, 0x4000) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) prctl$PR_SET_TSC(0x1a, 0x69beb49ddd2f9170) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000100)={r3, 0x6}) 12:40:07 executing program 5: umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffc0000000000003, 0xa9d2048b52ba55ac) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0x7, 0x46a) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/231, 0xe7) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 808.318616][ T2956] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:08 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x8, "5e7585e15acb1b70e45ae6b76d9c17f3f06d139ed7ac31cf64ffb0617501390f", 0x3, 0x1}) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:08 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) 12:40:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x2, 0x80, 0x81, 0x6}) 12:40:08 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xe203, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 808.703663][ T2971] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:08 executing program 5: 12:40:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x480, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) accept(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f0000000100)=0x80) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000002c0)) connect$netlink(0xffffffffffffffff, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x10000004}, 0xc) 12:40:08 executing program 5: 12:40:08 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0xa08578c908e1fdeb, 0x3, 0x7}, 0x80000001}}, 0x18) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$int_out(r7, 0x0, &(0x7f0000000100)) 12:40:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:08 executing program 5: [ 809.236524][ T2964] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 809.450284][ T3008] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x6, 0x200000) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x1f, 0x1}, &(0x7f0000000380)=0x8) recvmsg$can_j1939(r3, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x20f, &(0x7f0000000240), 0x1000000000000024}, 0x40000060) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000400)) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000080)={{0xd0, 0x1, 0xa4, 0xba, 0x9, 0xd9}, 0x1, 0x1, 0xfffffffc}) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000440)="7706f12508fa97adae9e290811231ec6d551b19b98e0adba98427b3a379f8547b747163ec1920a01e270ec47e52389a6556d8c7817afdf6b8904c813af193a977e3a85c649bfc9f26cb6b43bc51ef7882be7550eeda06b88c3518488be8caf72d0e91b5e0bb7d6e545b7e33bc15dc8587388de29dd491ce42cd672f2f71412886eb6e417dd06a6c8c964321dcccc") 12:40:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:09 executing program 5: [ 809.749716][ T3009] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:09 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xf000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:09 executing program 5: 12:40:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)='}/self\xad\x00', 0xffffffffffffffff}, 0x30) sched_rr_get_interval(r4, &(0x7f00000002c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x204200, 0x0) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r11, 0x40087705, &(0x7f0000000080)={0x81}) splice(r11, 0x0, r13, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0xfffffd88) get_thread_area(&(0x7f00000001c0)={0x6, 0x1000, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}) 12:40:09 executing program 5: 12:40:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/devoin\x89iniba1\xab/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:09 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) readahead(r0, 0x6, 0x200) exit_group(0x81) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0xf6, 0x0, [0x1, 0x1, 0x5, 0x1]}) [ 810.112143][ T3038] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:09 executing program 5: 12:40:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfe2a, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xffffffffffffffd6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:09 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101900, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x13, 0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 810.699360][ T3031] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 810.879245][ T3088] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 811.028649][ T3078] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:10 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xf203, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:10 executing program 5: 12:40:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:40:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x7667e47299cafee9, 0xfa00, {0xfffffffffffffffa, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0xfffffffffffffffc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = dup(0xffffffffffffffff) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x4000, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000180)='wlan0\xcc\x00', &(0x7f00000001c0)='./file0\x00', r5) getpeername$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000100)=0x10) 12:40:10 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x2e1) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r7, 0x1}}, 0x18) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40400) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="3903f5001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:10 executing program 5: 12:40:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 811.313011][ T3110] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) r10 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r11, 0x0, r13, 0x0, 0x1420000a77, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) writev(r12, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300090468fe0704000002000000ff3f037e4a75bde0ee1b81c6584b770b6fd7fd0000", 0x27}], 0x1) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) rt_sigreturn() write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:11 executing program 5: 12:40:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 812.076518][ T3159] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:11 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xf703, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80800) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="68ffb0b35805b44aec33c93e923662ac"}, r2}}, 0x48) 12:40:11 executing program 5: 12:40:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:11 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x200200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) splice(r4, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x80, 0x7fffffff}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) dup3(r2, r6, 0x80000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) sendmsg$xdp(r1, &(0x7f0000001740)={&(0x7f0000001400)={0x2c, 0xb, r4, 0x10}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001440)="eacb9b5b844712b38be56c89530e4003645369ac8afe906b8b1d05c371de1887dad829bbcbb98b3710c5625e2c255a2acb3ed17f1ed511c184c35b9c7b2d33248ad92582e6b0acc0b91a0a13691d71bd7b817383ea28301e92a0ad5e6532f0147b4cdcb068da4d7e8eb5", 0x6a}, {&(0x7f00000014c0)="2067b01ecbadb0437f27da07a262d1a5f5c39bc90ffb6a9e3e78fe23ef14e87facb8727a43baa6670bbad9109adefe73b12378b93fc18593bb893c285135e75e417c44515105ad152a0ea1be7c473ab25cab8d81790813c24afb2660aa54e3b498499654b4986fcd35028396a0cbc3c93af7c6594dad97ab180abddc49a823b061f79c533c9389c48f4653f61c59c4be1ce4b0b0119963bd5c58aa0c70f9b6ddaba376112d916814859678ebb6b42f98f80a682b5a423dfc88df7d5592c8053beb782e0f", 0xc4}, {&(0x7f00000015c0)="ab114ef6f57352f3de08654760d3e3f95a04101a0985c4c985284518b6e68b024bd46bf8ea918df5d8116e4dd22a226beeec487e6b4b4592d37e5865c77a6aafa628d6b40db22ab90dc32cf2ffc3ff8f434fed1bcd082c58fcd311a5f211fcd0a7bbaa580bc809a1304b2cc89f", 0x6d}, {&(0x7f0000001640)="9d2c71ba5936ef88c61467fb63af78bc487692e50a93261bb654b9bd703c622ed5c7a7b7f9fead3e62", 0x29}, {&(0x7f0000001680)="49ab9e3e90d066edacd03b65e618ccfe767e3f7fd2afa6930c6e7a22c03e588b897f1a8083421e67d56b9cc32ca645bf2217d9093b6c6585ccaf8491302b0bd91d1af4f68bf564275f73b06028620f6a9105ba187138c9991f8f2e31fd06e0ba9e5e7d478c6543f08087c54a3283c70ab2060e70c03d035eaa890e2887d779364697f48a580f1ab88c571b9ff7f293", 0x8f}, {&(0x7f0000002780)="4110495e88f7dd561be0041914d3a03cd6ad6a7e57d49b710fb670ec06333ef1363569315fe7796f1156df67edf731d0431d65541171df28a4a88530f89c7e1894e281537b647215dc73bea208a84a130dcf", 0x52}, {&(0x7f0000002800)="045a069555bbb728e348405fe19696f4209be8cdea3b1d05d8881deca5aefda2ae595ccf533425d9579f45153c7c08ce8addc1b9ba129e8b47413125a78b8c89b62deb6deed3e4b712ca", 0x4a}, {&(0x7f0000002880)="3c0d7f46b80a53fa05a8eb961027c5ee34490e240214e937eedcb98d53252db741861bc5d2b35665f872f8631f2a74884d74bb5f39ea53f86cf5cd39084bf5296096231f3928ab76ac291f1a47468fd3ff0791fa7b044ecc446b872a48e0fab2e6b1b92629860df94a9b68a45d75ba5595e0d674ae9285b3d80e82402de379d3354afbac6663764ba2e91a1689f75ee247b828545acc62ef5e44af4eca14ca9d22756f1af7a3f22ad0cb48ae820a", 0xae}, {&(0x7f0000002940)="ed4b66f6ff0bb4842cefdad26c7ffbbb9a4cb54fa09968d3141cf05db2f005096c4a02d3c5a1dbad670f049b87ad30f59c196fb786b4cb2646cbcc689b15bdf82761da52e662ea063e662bd1265ac2d3fd47e3ed1d7433023be01bc143074d25cef289dadf26094ebe655cd273569bb6db010722af524b747c6b0239f164bd87a874c8960d193c7dc5706fe25eaa4738f407c8ceb30d1337c48157b823cc796b7ffef88bd5ecd71df1e84132204fca3f658c5da9ff957f", 0xb7}], 0x9, 0x0, 0x0, 0x8010}, 0x40) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/4096}, {&(0x7f0000000100)=""/44}, {&(0x7f0000001180)=""/30}, {&(0x7f00000011c0)=""/209}, {&(0x7f0000001780)=""/4096}, {&(0x7f00000012c0)=""/122}, {&(0x7f0000001340)=""/6}], 0x23b, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x8) 12:40:12 executing program 5: [ 812.479857][ T3183] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x30c, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1e35, @mcast2, 0x3}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:12 executing program 5: 12:40:12 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x81, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x8000) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 813.021278][ T3163] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 813.208219][ T3227] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 813.244750][ T3235] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:13 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xfe03, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:13 executing program 5: 12:40:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0xffffffffffffff7e, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2, 0x7fff}, {0xa, 0x3, 0x0, @mcast2, 0x1}, r2}}, 0x41f) 12:40:13 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20800, 0x0) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="ce98009017a919e97a136ee8265f57", 0xf}, {&(0x7f0000000180)="475ae194e759376954c471e41c80439b5f41d5dea51385060ef9985c2e3afc1fe24ae4fd7d9711748cd4ef2e5a208d0fe7b13edff5ac901d01a2e983722feb2b1e285b20249ee31aef8e71a7c961265496ee7abf190598588a5b63f20287704dd30a474f2ee0c65632518950c82bdb090cb2a0070535d4c1ab35b33ba2e0f8efd64ca3bdd10886eac6b603ded0f17f0888f969f70f84144e898e719236845bb2dd99ca72f3180cc310abcdf03edfa854bd24251fa0dba049bfb2e156d5307987f2d26c93d48c9c5c9774a4dfa35ad2ee833c13ac6a6727b144", 0xd9}, {&(0x7f0000000100)="3539554e03c3d5e17184d3666456827f0c8e85850858a2bb19b04515b392bc43c4b91e50d82d74907c4f3475bf", 0x2d}], 0x3, &(0x7f00000002c0), 0x0, 0x1}, {0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)="d37bc5f2e92a559f7cc888f420059c8a86ff0544cd6554ffdd34845ddb82d4fae3de4d7ceab91dbedbb147dcd3514383ec4644081c7bda4b262d0b2e1cc353128377c93659327527ef0ea1b2c841e118be29cd3c193ca65d0c270828308438ec3bce6a4234ded9fbc9d9331ca49953276fa51bd90a978faa0af6d77974a09529e81eb0e5655b6dbf92c5601555ac3ec4deab00c7b4168b2e307bc1818ba7b9e62dbca419c3a083cf66d8d0a8128d66ee6a0df4fbdfabf5390d400b9a55224a91b7c04cbb30b55d6376aaccb40fee926cac2e889b", 0xd4}, {&(0x7f0000000400)}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="6a613c64ed630686af130bb0a95de48018de33b9122acfc59642c9e5b5a5a1a0ea9ce3cca1be5ca9134a25ec8caa24179a32447989d44b4f39abd7461766946990ccfb5d0c2a4151c258abe02f7ca37631df3c6edc1103441b8ea87cb5a84bb3cda58c0fc72c49fa51afa68894fc5987b255691acd17011cd64b2c4c8996a1714e7cba8fd848d7d97a3a6f3a2b32add7464aed5544e7ff2232f5888b9a1809aa096d0b08d6967b278f37c63400799e8d72b63f2fc431dea8a35ca463e7239d2555774066930d4f80f4a94914f3718127f3", 0xd1}, {&(0x7f0000001540)="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", 0xfe}, {&(0x7f0000001640)="d8f354cdd726c229a62687343244e32669c8bdb67eb1e02470a5109d9381424a6469cdfcfae4302de9c86e7a8ecce7703e16513f979e88a1705161c581d02bc1deeda95bf5ff0938ef592390affbfc59c5c5bf40b0f9fe9dc29e0206afb12e114574", 0x62}, {&(0x7f0000001780)="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", 0xfe}, {&(0x7f00000016c0)="1115fea098581a1f7d9e377efe61", 0xe}], 0x8, &(0x7f0000001700)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18, 0x30008018}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001900)="bb19a6640e4c84deed54e6d874155e6379e21e291829bd73bed274d44a4c739e574dd73c628ba45821ea452eff593125e85a17e0ee204771ce2f2cb96ed8150e34585eeb0ea7", 0x46}, {&(0x7f0000001980)="690f33599910bf81feed99435aa6fd7e02881c6a28b65cc3c9941abf8f36c4f1e9277731e1f108c10aa8f75c486148f575d2f47258dac8434613ae168a40c7f987e1ee713553d9db813bffe0c2fbe6d8b1236dddca81aa3431aae2dae1cd7889cfefc7fd6e3c7dcfe28f8aa0a0569fbe686c71e71b14004ad24a3c2c652cb979673399a1424a7f9804d511be9a2ec646bc3282ba0f3d2bda5c69e107057af8469293128e59dd0e93a1a26197c9652cf723924505fac90af9dcfc72e871f8cb46e3f285a066e27841b8726b29cd8c35d8ecf2a976771c0d14a7f3639eb792bb6a94342b623d044a9d6b1e8119cbd73a91bd", 0xf1}, {&(0x7f0000001a80)="d7319f619d81c231ac3c9125e42751d305dda499439b296794f54904e2f5c94e049f418ad816d013ac415baf87934a00a4897bd2e65e7961dd100d22a3946bedf5dcbe8315ba3fc7b1", 0x49}, {&(0x7f0000001b00)="67b605b85a6a5363397d8064da347b01934d54001f7264b4c1f3f1b912ed124db2cc8942900c73b5b3e702662cadb680a2d8083002656ada4723639ffe3cf2d258837fce72754de994e783ed9af469cbcc5d0a170e146c0722cefb9db94e6dcf92b4609d698de5c732352e6d010a3d272c3c608aca7e97cb24", 0x79}], 0x4, &(0x7f0000001bc0)=[@assoc={0x18, 0x117, 0x4, 0x94f}], 0x18, 0x20000000}], 0x3, 0xc800) 12:40:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xd000, &(0x7f0000000080), 0x1, r5, 0x2}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = fcntl$dupfd(r0, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r11, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:13 executing program 5: [ 813.649113][ T3261] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:13 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x0) 12:40:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:13 executing program 5: 12:40:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="015aee2674a4b8c8033ab4613eff164bd9ebfca911de4158950c2bbc3bdfaec5bdd19376b3d004093f6acf8f9f25b9535c7d951b6b23e0b0941648375da55bac0772e2544117dc73b35acc3e65e0c6f8272f2093b92843a6b18c0865b43b01856d063bb9e02822cde99324488572", 0x6e}) 12:40:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 814.184830][ T3267] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 814.400799][ T3303] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 814.507747][ T3260] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xfeff, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:14 executing program 5: 12:40:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x7, 0x80b1ebdaeb55abed, 0x9, 0x0, 'syz0\x00', 0x101}, 0x3, 0x100, 0x49d, 0xffffffffffffffff, 0x8, 0x3, 'syz1\x00', &(0x7f00000000c0)=['/dev/video#\x00', '/dev/video#\x00', 'wlan1\x00', '\x00', 'vmnet1\x00', '/dev/video#\x00', '/dev/video#\x00', '\'wlan1\x00'], 0x45, [], [0x0, 0x6, 0x7, 0xe3c]}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000002c0)=0x8) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x200}, {r0}], 0x2, 0x8001) 12:40:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$netlink(0x10, 0x3, 0xd) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0xfffffdbd) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x190) 12:40:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:40:14 executing program 5: [ 814.820698][ T3327] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:14 executing program 5: 12:40:14 executing program 5: 12:40:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000005c0)) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xe}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={r8, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000240)=0x84) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 815.290808][ T3316] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 815.498180][ T3362] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 815.691707][ T3369] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:15 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xff0f, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:15 executing program 5: 12:40:15 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) 12:40:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r6, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r6, 0x800443d2, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) accept4$unix(r8, &(0x7f0000000080), &(0x7f0000000140)=0x6e, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:15 executing program 5: 12:40:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 815.992548][ T3377] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 816.032582][ T3385] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:15 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x2b, 0xfa00, {{0xa, 0x0, 0x5, @ipv4={[], [], @multicast2}}, {0xa, 0x4e23, 0x4000, @mcast2}, r4}}, 0x48) 12:40:15 executing program 5: 12:40:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:15 executing program 5: 12:40:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 816.784880][ T3415] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:16 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xff7f, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x7e, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 12:40:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:16 executing program 5: 12:40:16 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0xad5f, @remote, 0x5}, {0xa, 0x4e23, 0x7fffffff, @ipv4={[], [], @local}, 0x7fffffff}, 0xbdf1, [0x2, 0x81, 0x80, 0x5, 0x400, 0x7ff, 0x40, 0x7ff]}, 0x5c) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x80a00, 0x90) 12:40:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x100800) getsockname$packet(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x14) 12:40:16 executing program 5: 12:40:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0)) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_int(r2, 0x0, 0x31, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x380, 0x270, 0x270, 0x270, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x5, &(0x7f0000000180), {[{{@ipv6={@mcast2, @loopback, [0xe83689c859078aa6, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'team_slave_0\x00', 'team_slave_1\x00', {}, {0x101}, 0x88, 0x0, 0x2ea72ab8ced90645, 0x2}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x100, 0x2, 0x0, [0x1000, 0x6, 0x5, 0xfc00, 0x2, 0x4b, 0xff, 0x80, 0x2e, 0x3, 0x6, 0x6, 0x8000, 0x81, 0x1ff, 0x4], 0x3}}, @common=@unspec=@state={0x28, 'state\x00', 0x0, {0x9}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@empty, @ipv6=@ipv4={[], [], @empty}, @icmp_id=0x64, @icmp_id=0x68}}}, {{@ipv6={@mcast2, @empty, [0xffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff80, 0x0, 0xffffffff], 'netdevsim0\x00', 'ipddp0\x00', {}, {0xff}, 0x3d, 0x5e, 0x1, 0x15}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x97b, 0x3, 0x1}, {0xc, 0x5b, 0x5}}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5fefe7bb6f984b1a, @ipv6=@remote, @ipv6=@mcast1, @icmp_id=0x67, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', 0x7fffffff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 12:40:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:16 executing program 5: [ 817.230464][ T3435] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 817.260671][ T3444] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:16 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/do#\x00', 0x100000000000003f, 0x202000) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) msgget(0x1, 0x8) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 817.681073][ T3471] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 817.917225][ T3477] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:17 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0xfffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:17 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/102, 0x10b}], 0x10000000000001cf, 0x0) 12:40:17 executing program 5: 12:40:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) 12:40:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 818.338222][ T3469] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:17 executing program 5: 12:40:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 818.442406][ T3492] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)={0x800, 0x8fa3fdf8203080a4, 0x4, 0x40, {0x77359400}, {0x3, 0x0, 0x20, 0x9c, 0x5d, 0x1, "378f47a1"}, 0x80000000, 0xd4bd906543026259, @fd=r1, 0x4}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x83, "8c94a47aa29d4f9e50df623c57d6d5d97cd27bf6f799dcffa70c724035de2d09d073ab4114c058ca16150d93877fb8dcaf1331eb1ad44775b23e028165bfaf18837d5041a73450151439e31dbf13bfe542311ecede66365dee488702aef59bd9cb4dba4f5b6b5b292b33b7a1a5c462cfd9c4457acfa3a55bc49a0ceb2712c8a0d3892e"}, &(0x7f00000000c0)=0x8b) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r5, 0x17, "8738a82c5eb537cfcb4da62d1f7994265d086eef3640f2"}, &(0x7f0000000240)=0x1f) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x6) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r10}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r10}}, 0x48) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vsock\x00', 0xe4294b55736a0ff7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x111, 0x2}}, 0x20) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r13}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r13}}, 0x48) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r15}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r15}}, 0x48) write$binfmt_elf64(r14, &(0x7f0000000580)=ANY=[@ANYBLOB="066b2a7f350b5070e558302acddc82fc8fe73773513b40d9c77172b4c15ea638c26e9623f5b3834c5fa336bc8a6b2171cac7d287a84de8f08c9e831c70ae65bd6051d61d754e2d6225cb93fd264a9a7f26249e9eefe643529166da2a427417ed471fc06e0762c78a6a6985d6a2b2fe44a880cd963cbbff8a8f033dfb9cef7554b91bf91e9eb5ae5c95f892ad3fb5ea1cda911f06d6af4772966bb267439a9e6563f0edf396ac66a854a0cdeaaf2e48be6f660afe15ff22c880c2b323d3f1a83dabba40a2b86fcb0ec5a17bdf17fb8416f9c14cbc279b1e4d51aff54adbbd724277ee9c1a838fe945d90161cbcb86726d2812", @ANYBLOB="0289f3a85783d9a44dec2fb7c76b45100a3bd6656a9e78c5ed833cc69e00cb8709ff8b757b3070be0a011919f9a38e37bca06a906c0355c603749c4dce296ccabb0a532e7ddc99e01727451a3a580e7c48418b2050f65cc7db4c25460380cab550586c13", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESDEC=r7, @ANYBLOB="cc9e67450f80166d1a5d495e66f6a84a202ee3965c74b69f97e0e825a68681340f30553e646cd37c8c6eb9dd6a67f97c5ab5f01da371b8648a94a53a39205ac896fc008b2775ecd079d24028aa944cb824247187219e370db3b7f43a3e357746c063266e4945377a90a36e76268e3b11c535af7eb43cf6928f2c3400a66b92037112228ade0d9ed6a5a6ea8860e6a0951538ac0a56fcb803fdc2f4a474a622e891ad92a89624b80b1f5f2ae3879519be921b27160be936cbc3557dc4e71c7e7f7f"], @ANYRES64=r9, @ANYRESDEC=r12, @ANYRESOCT=0x0, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES32=r3, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="d5960f8a6a3a9285f765ba9b68e515e250388db3ca119929fe11811b8ac789c2057b9327f2d46563028424a36b4341964ef18ae8b981d13d08a0ea3a1dccbb8c304b0a64cb455f6d283515b0dcd505378023e65fec6da547f2f7f3b0e7b7c1100922039c409a737132f1bc7395da7a906ee6a13ba79a27009bc39e95f63b2450d011895d9541e870fbeacf772c2f3519b209a88d6833bae8fbf5f821b2d5746677da576535a2ba47a48766e4d4017ace2ada64e5c64d3411d95d2bb21419b028ffdc", @ANYRESOCT=r7, @ANYPTR64, @ANYBLOB="a67570c2cc2635da4d9f0ddf1118c422139a6bff0faaf3563f5ce45a5ee2cd7eebc84285edba7a16b59283494a9c42dcb629eb4df2dd37d70cbf478bbf786ceb14d992dc9a2d441a57107bbc554aa9e4c86ff0966c2adf7a5e55235dc669fd13da01319123c8557ea896254da05dab2096fa7847826039d2b716c5ed42a2dad67bc97478bdfb16d6cda71b5d3856560fcfe5056146b2e1c65ff0fc649cdcfc", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16]]], 0xfffffffffffffe76) 12:40:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x326, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}}, r3}}, 0x48) 12:40:18 executing program 5: 12:40:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 819.215018][ T3542] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:19 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1323b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000002180), &(0x7f0000000000)=0x132) 12:40:19 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xf4d9, 0x20000) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/249) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 12:40:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x3ff}, 0x0) 12:40:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x2a3, 0x0) [ 819.643538][ T3560] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in=@remote}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) getuid() r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @rand_addr="0793a47109beabc1f64716c1a2501386"}, r8}}, 0x48) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x22c) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r9, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001680)={{{@in6, @in=@remote}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0x3fd) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1, 0x1) 12:40:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4b, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r3, 0xe9b038d1c8b8214d, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8517}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1f1}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x6212515b1d1b047b}, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) 12:40:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r1 = socket(0x4, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r1, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) sendto$inet(r1, &(0x7f0000000180)="aac338c0c0ca740aece8ca2c27306a604537b7bb8923b35d0371f848e53d502bd14799b4fea67562c6fa4147a2560b3d1e5fb5b71e4ae0f62f9f6a5a2674a42b8650327fcd9272d1333195b39da1265fd5db039a91ca74c1d971985aeb5b3d2f248617de524d444deaa71ae7ec94ecb39cccdeb938ccc5ad774ad2be3172b33faec37af9dfac60010d287b6c6e343a1e7ff0f376873543744ab8e46e776f5fe987c92b319a62eba59b197b1a1792acda4e27b8a2e8b99bbc6691d6967538386bf4cd0d20cff4eb992282a9900758c94641c9ef009d736780195235e89ccc037b4df101801080dc422f044955e968d89f008163", 0xf3, 0x20000000, 0x0, 0x0) 12:40:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 820.420896][ T3606] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:20 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1323c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2e, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x82, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0xc) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x82, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r8, 0x5, 0x6, 0x7def, 0xfff, 0x7, 0xc3, 0x8, {r11, @in6={{0xa, 0x4e21, 0x20, @mcast2, 0x2}}, 0x9, 0x81, 0x200, 0x2, 0xff}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={r12, 0x68, "3195ab35779b3c46d171a24fd2fd8bf22ef4564f5d2d0b36c939af51982240aef972a54171e178bf58857c76128189b68675d9c8ed6ec94363865d267d02a5e4b688eab7c0d9da08e0f821b18e12587480f733e31920ba7e2e46b8a0f48810e25ef360c4c8ac52ea"}, &(0x7f0000000340)=0x70) 12:40:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r11}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r13}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r13}}, 0x48) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r15}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r14, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r17}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r16, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r17}}, 0x48) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYRES32=r12, @ANYRES16=r15, @ANYRESOCT=r17, @ANYRES64, @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="dbe8c0f4236e587c16eaaacaf4c9968c16286f7a09864b7aa7e1d9c65aeca2665d07749e4ab75c0e2718ba43d763d47b0e8088670489e97f768d7c3a0771502c5b79d03235a5d6d5366e6d0bc1282ade15b0a9de6b3d8f328975c8a8b5e0be9d5060076820a435d754a6ee306c178f1286e8032e4d710854cbf9711e24c4e5641ae0772972b0f9095175255f7a3b8ebbfe1a44904446f5514369522c57114a3e3046647f5fbd82944d5c82f1fc56033f6bb7f58fe5d7c7a569da7818f55f35681de9f012d2ca9ac202ef63cf793c5dc3bababc9b3f335da1ed2b0f1b"], 0xfffffec6) 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:20 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000340)={0x9, 0xb, 0x9, "9eca1bd5ea1a3df24a36e31e67ad8f2c69b74315becf513020bdcddc7c7517b73e87444c5eb25db2b5a248b92be0767d7f08b3b596b22e56998d860f", 0x1b, "2e139d5bffe967a526a15170599cd1c7e06f1ceafe7fa3ffa7aafa323acd7d6466a8f54d04319f8a12a5c8fae3a937dfdde07e7578f01ab1372e625f", 0x40}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="86a79a1d70c4657f0772807e611f486982faa2640a615b23c7e15b3509e4085f3201882b1185bfade75f8687241b0406e474da3e4e9cbe6d701bbc9ef4fa6f3c27f117c026ce19a23b92db5a41ec2deded126a1618f05eec4714b14af8cb447b482ad80ddf8f3efedf6ce055900ca80af0d0286c95dfbe73df307510b6adf29043e57be688b79687d9e5304eb995a0d49062b45413b708e25041c7a8dd", 0x9d}, {&(0x7f0000000180)="f6cca83792b0d35871e8706eac10aa2aaa5d4796a41b55b5dd0c5b60c976c4b558fa8e12428e09ab83acbd590fed", 0x2e}, {&(0x7f00000001c0)="fbf84f28e687c701400ac7747aa5fc371890fb4567689558d6e3bbf7a1", 0x1d}, {&(0x7f0000000200)="3cabeb8ea9e0d6ebc790732bfe0039b47627d707b0cc18d5ca6848ea02a7d26bf8e0fe7a6344d0e65f91725d2f2776f5b759053f9e4092e17ad5f05c7b1c53dd382d2e9de96a56a176bf2b8b4deeef64dce6170d7ff4303b23d78abc68b2ae2726eef453d3007152a093adf2c6f144c51627769d42f8ba434bcf205c1217fffd6b7205aa0803df74d69d1b62dca247c28047fd28fc3c6ccaadf4585d3882141877a8a3e5fc51c1616192a3f5bea8a3b0a64220b43ec0780286fc498679b064667d877e07217b6d6db24962a578f7", 0xce}], 0x4, 0x1) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x1896, &(0x7f0000ffd000/0x2000)=nil, 0x2) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r5, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:20 executing program 5: clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) lstat(&(0x7f0000000040)='./bus\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) write$FUSE_ATTR(r2, &(0x7f0000000440)={0x78, 0x0, 0x2, {0x33, 0x0, 0x0, {0x5, 0x0, 0x2, 0x0, 0x77189ae1, 0x5, 0xcf5f, 0x2, 0x6, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000}}}, 0x78) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x400, 0x0, 0xaf2, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) [ 820.849698][ T3625] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = accept$inet(r2, 0x0, &(0x7f0000000100)) fcntl$getflags(r0, 0x3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 821.666097][ T3671] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:21 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1323d, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xd9, 0x20000) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x194) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/95, 0x5f}], 0xd7, 0x0) 12:40:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="c7047e1f27156e2d10c5ad6977630c84a7cde987aec39ff2735dc04d82d2034d717b2f25610e4c237cc91036962f94865ad14d57aa456ac1d4724f180b5d72f23e15f1e658adec651a645874df028e968e85c6ca8baa5029041f0df4e3ade6db04f2a27112f421a2af9511712d25b790974c34f5529bf8e4fd48fb1970af1d2c0b215f1b747f9b001af118ead3bc6e40e69fbb28b328500ae7ed21020663057767c6b6d6d8669104fcc8bd8847", 0xad}], 0x1, 0x8) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000001c0)={{0x3, @name="4cbbe4625520abd817351307e54fa2fc8b03de697193ed0893153a0c3cf4b049"}, "7db3956399a4126b64f87a9d89cf6d0e67fe10ca44141beca678f40deac22b78", 0x1}) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000300)={0x80, 0x0, 0x0, 0x0, 0x5a}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1420000a77, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r6, 0xffff, 0xfff7}, &(0x7f00000002c0)=0x8) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) r7 = socket$kcm(0x29, 0x2, 0x0) fallocate(r7, 0x10, 0xffffffffffffff81, 0x7f) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r8, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x82, &(0x7f00000000c0)={r12}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000440)={r12, 0x42, "7ecc672e85b42a8df05e8f821c23f3930e82d848a98404eab8fad61a57cc76319ac99a8ea2a2bb59490a51478f2d287960e8895e5a12b995f24e48beafc846d9a8c2"}, &(0x7f0000000180)=0x4a) 12:40:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x8000}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 12:40:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) 12:40:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}}, r1}}, 0x48) [ 822.289764][ T3713] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) syz_open_procfs(r3, &(0x7f00000001c0)='cmdline\x00') r4 = syz_open_procfs(r2, &(0x7f00000000c0)='net/dev_snmp6\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) openat(r4, &(0x7f0000000200)='./file0\x00', 0x8000, 0xa0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4a21, 0x20000000, @mcast1, 0xffffffff}, {0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0x4}, 0x1ff}, r1}}, 0x48) 12:40:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @mcast2}, {0xa, 0xfffd, 0x0, @rand_addr="7af0c8855933bee3e05592eb27f197f9"}, r2}}, 0x48) [ 822.918893][ T3753] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:22 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1323e, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) dup3(r2, r6, 0x80000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r4, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r8, 0x8008ae9d, &(0x7f0000000480)=""/223) r9 = msgget$private(0x0, 0x80) msgctl$IPC_STAT(r9, 0x2, &(0x7f00000003c0)=""/150) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r17}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9743947e54a764cb, r17}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9743947e54a764cb, r12}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) r18 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r18, &(0x7f0000000080)={0x11, 0x0, r19}, 0x14) setsockopt$sock_int(r18, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r18, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$netlink_NETLINK_CAP_ACK(r18, 0x10e, 0xa, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r12}, 0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@int=0x2, 0x4) 12:40:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1, 0x101) 12:40:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r9 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r10}, 0x14) setsockopt$sock_int(r9, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r9, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x82, &(0x7f00000000c0)={r13}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000001c0)={r13, @in6={{0xa, 0x4e24, 0xfffffc01, @local, 0x1000}}, 0x7, 0xadc, 0x4b0c, 0x3, 0x14}, &(0x7f00000004c0)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r14}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r14}}, 0x48) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="39aca25e302c95993af1a10e297e5967c05bb75b97b760a5624b3e3594527fa62be9689f67e627ee59b7080c063e7d299db0a766027415c2d9d685d16ec5a2600edf1bce8d72986e20f99c049a9d72c31e2e025ea4983b022a86c9d61a8c7032414dbdd36beb07842ee44f88cec2ecf49319faf0e4a9e952cfa1d270d3668e80b6988892083131b3d36b02da78bf3364761d672a36572b610765f0f4ace94bd54f0b3c8c6b447993f4e8a1a8b5d87c9b1ed5c327fba95e15a45667c0e8f827b4a83cc9ffab8cc4199c4bf1876c50571827", @ANYBLOB="6bf9d8692ba8f52f2cbc09261c2e1cb31274fa9c2d8ac20069adcc6a7f8b15fff163afbb0c61e02c2067299c4135a069cc1d399d3af23cd755910742ea40307283247f39a15576fffc8bb87b31730c25405a120e1ecfd0b2436896eca6f2de2377d818322ba43f3466f088acc681d05da72ad772c80f776a5fb9ac6ad282c2a9fd06fe5ddfa3242ee0da951a02d9aa8b25b9190a1ea5839ddfeb8fa1b968bc1f70ab63ee2bc3ab1794c7da6f7650ba1cc736c41dca37300a1b73be754eaed9987a7e6168a5111890c983bbe729c6e3efab5a1929a628d2d84e09c80954aab79a94927e9542e004230b4141041690086757f0", @ANYRESHEX=r7, @ANYRES16=0x0, @ANYRESOCT=r14], 0x1ee) 12:40:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 12:40:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x400100) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x8, &(0x7f0000000240)=""/49, 0x31}, 0x3}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/150, 0x96}, {&(0x7f0000000bc0)=""/96, 0x60}, {&(0x7f0000000c40)=""/134, 0x86}, {&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f0000000d40)=""/77, 0x4d}], 0x8, &(0x7f0000000e40)=""/111, 0x6f}, 0x6}, {{&(0x7f0000000ec0)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f40)=""/55, 0x37}], 0x1}, 0x8}, {{&(0x7f0000000fc0)=@ax25={{}, [@null, @bcast, @default, @bcast, @rose, @remote, @bcast, @default]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001040)=""/54, 0x36}, {&(0x7f0000001080)=""/161, 0xa1}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/88, 0x58}, {&(0x7f00000012c0)=""/22, 0x16}, {&(0x7f0000001300)=""/162, 0xa2}, {&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000001480)=""/161, 0xa1}], 0x8, &(0x7f00000015c0)=""/177, 0xb1}, 0x6}, {{&(0x7f0000001680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002780)=""/75, 0x4b}, {&(0x7f0000002800)=""/216, 0xd8}, {&(0x7f0000002900)=""/155, 0x9b}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/114, 0x72}], 0x5, &(0x7f0000003ac0)=""/160, 0xa0}, 0xff}, {{&(0x7f0000003b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000003c00)=""/83, 0x53}], 0x2}, 0x3ff}, {{&(0x7f0000003cc0)=@alg, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003d40)=""/238, 0xee}, {&(0x7f0000003e40)=""/150, 0x96}, {&(0x7f0000003f00)=""/144, 0x90}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/226, 0xe2}], 0x5, &(0x7f0000005140)=""/25, 0x19}, 0x6}], 0x7, 0x12000, &(0x7f0000005340)={0x0, 0x1c9c380}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x82, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000053c0)={r4, 0x10, &(0x7f0000005380)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000005400)=0x10) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="3d2cab766272ffe3c6db1e49bb0c9d053daa26cd56fb4b4e5526"}, {&(0x7f0000000280)="1174a0fcce6c6a6f0a9dcb0045b315d6aeeba3a9656b1ed9eb357efce776973a5c821517fb5975d0837b46962e2320f13587e9759df15c1421f0a570f6c8bbeed9800271e7b62cd97a63b1b9cc8874a20270ecd78f7d363f241d299c9390d07340db410684f588834eba484d7c458a783be5d778d5b75ca0a556656dc8f6696b29f52e9221489144b7f5f4f0056f0beb162dabd06cda8b1a61bebf466c2351db939018fc13f37ff776885420fea1615ed0339f4f409adc008c76449380c77b7aca5c788e83f383a4547af9b5ead890056ed1939408023f"}], 0x355, 0x4) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000080)={0x40, 0x7, 0x401}) [ 823.362488][ T3772] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:23 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20a00, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0x2, @raw_data="8cc533cc9a6f3681778f7ac7917a0b36dbabfb6a61f9b4718ef23edb80b38eef0a91fae60bed397e741b2547c497024e543e8b7837aebf78501c9e714e336c89335049f7a3f9905f6c28d37786155278ac978a338fff3c0785d3f5b4ee6bd58e3c00a7ec862e1d158d0665d0bb0c2594c8724a9d4c4b1ae0afc9cb6a8f741516cd6c539a2d046fa0476259a36e137f08a385dcc0958cb1c440a7337e2cf4b6fb84a8a9fb7f847f1d394fda431313454aa6fa857064a283776eecf422fc7d019375ea28469cd83f2b"}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000280)={0x80, 0x4, 0x3, 0x200, 0xfffffffa, 0x2}) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x4000) 12:40:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 823.983278][ T3767] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.010463][ T3820] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:24 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x1323f, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:24 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200200, 0x2) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x119) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) 12:40:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000280)=0x1) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:24 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockopt$inet_mreqsrc(r0, 0x0, 0x35, &(0x7f0000000340)={@dev, @loopback}, &(0x7f0000000380)=0xc) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) connect$bt_rfcomm(r3, &(0x7f0000000240)={0x1f, {0x9, 0x1, 0xd8, 0xbc, 0xff}, 0x7f}, 0xa) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r2, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000140)={0x234, 0x2, 0x1}) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0409aa5cf4a74ab70f17e618a2366124d1bb3cc7482af9e08a0c287e568d515181f5be5d4d89ff0b7633702bf504b5ca2624027eca2acc2dace9435815e9dfd2117da027b3f3283115037f2b17b6327699662a32788887eea58c6552dfd4f14fea1364a1abf97c770351743a5ebbe2f4c446d8cd1a82eb5bfca310a8c34c403ba693b2dabc0794a86cac62b74dfd77ea5955ef72c3191fe3"], 0x7, 0x0) 12:40:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r3, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000180)={{0x8, 0x5}, 0x20}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000240)={0x4000001a}) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r5, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f00000001c0)='veth0_to_bond\x00', 0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @rand_addr="fbe80b6c5ab1eb92a261b72c771e3958", 0x5}, {0xa, 0x4e22, 0xab9, @dev={0xfe, 0x80, [], 0xd}, 0x9}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) [ 824.603073][ T3840] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6}) 12:40:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 825.099582][ T3833] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 825.291333][ T3876] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:25 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x13240, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 12:40:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000280)=0x1) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) 12:40:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 12:40:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x8001001, 0x7, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 12:40:25 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r5, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7c2ffaca6409b248}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x802, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x180}, 0x80) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000240)={0xffff, "eab90a3b51b8a90c9124f58df1ea098456c4cc3374987f700588e6e9f9b8cde6", 0x7, 0x8262927db8a15a7c, 0x7, 0x7ff, 0x0, 0xfd32796ded34f99e, 0x81, 0x80000001}) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x3f, 0x0, 0x100d, 0x7, 0x100, 0x2, 0x5}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 825.716781][ T3890] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 825.748495][ T3898] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) recvfrom(r2, &(0x7f00000000c0), 0x0, 0x4005, 0x0, 0x0) 12:40:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 12:40:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 12:40:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4580b01bd007eed1}}, 0x399) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0xe, 0xfa00, {{0xa, 0x0, 0x2, @mcast2}, {0xa, 0x4e24, 0x0, @loopback}, r1, 0xfffffffd}}, 0x48) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e22, @loopback}}) 12:40:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 12:40:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xdb}, 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x202000, 0x0) write$P9_RLINK(r4, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) [ 826.638775][ T3940] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 826.656722][ T3947] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:26 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x111200, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000280)="7fb620f8abf345220c46216fb885aa89152065081f548d8c75266776b318c2f730ff6d86e6b3c58ec6b1321e13f232b8f5e091cf5c2fa192a91eab57906dd1346d82bc5d2af0ba7a34a802bb955422868f54f722678b5a3b182b34982e58ac1523276bc5b8fbffcfd49f69c8d0", 0x6d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0x3, 0x21, {0xd9, 0x91}, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xe3b, 0x13241, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr="06be5799e2783ecb206b56d544fa6d5e"}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 12:40:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 12:40:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = socket(0x200000000000011, 0x3, 0x0) set_robust_list(&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x6, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r2, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 12:40:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a", 0x27}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}, 0x4}, {0xa, 0x3, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) splice(r9, 0x0, r11, 0x0, 0x80000001, 0x0) r12 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x3e7) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000001340)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x44b43227ddf8a4a6, 0x0, 0x0, 0x68, 0x18, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/227, 0xe3, 0x2, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x34}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}, 0x1000}, @free_buffer={0x40086303, r12}], 0xc3, 0x0, &(0x7f00000013c0)="eadb99f0caeecfd87a2498369b5c1773c48b76e37849029f2004dfb1f54b26d5ad4f275fa79b8fe8707eb6e167bbbbf6487b22ea00362204055a5d95e375ec760f23bd2223643bafd08076ff207d4992747221e651c1b3e11af58dc5c9099ca6be0ca7104d80cf4a36382dd56e44c97dbbbaf551295a96e495c846ebd9a57ed7f7aeae8246dfa97fc7c55bd8e9de2fa903e0ff1dbe0148914868cc482fbdd0c50463513931cc788da897c668c92b883d1b124884f18911493356cc3d64186929abbf29"}) 12:40:26 executing program 4: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1, 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000280), 0x10000}], 0x1, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x11, &(0x7f0000000180)='vmnet0systemppp0\x00', r5}, 0x30) fsetxattr$security_selinux(r6, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x2) 12:40:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000280)=0x1) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 827.273507][ T3963] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x253) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r6, r7}}, 0x18) [ 827.315655][ T3974] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:40:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 12:40:26 executing program 4: llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/45, 0x2d) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000000000003f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0xfffffdab}], 0x31c, 0x0) [ 827.515005][ T3987] ------------[ cut here ]------------ [ 827.520739][ T3987] WARNING: CPU: 1 PID: 3987 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0x8b6/0xc80 [ 827.532802][ T3987] Kernel panic - not syncing: panic_on_warn set ... [ 827.539401][ T3987] CPU: 1 PID: 3987 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 827.547203][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.557259][ T3987] Call Trace: [ 827.560566][ T3987] dump_stack+0x197/0x210 [ 827.564914][ T3987] ? __vb2_queue_cancel+0x810/0xc80 [ 827.570200][ T3987] panic+0x2e3/0x75c [ 827.574097][ T3987] ? add_taint.cold+0x16/0x16 [ 827.578795][ T3987] ? printk+0xba/0xed [ 827.582784][ T3987] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 827.588265][ T3987] ? __warn.cold+0x14/0x35 [ 827.592682][ T3987] ? __warn+0xd9/0x1d0 [ 827.596755][ T3987] ? __vb2_queue_cancel+0x8b6/0xc80 [ 827.601957][ T3987] __warn.cold+0x2f/0x35 [ 827.606322][ T3987] ? report_bug.cold+0x63/0xad [ 827.611099][ T3987] ? __vb2_queue_cancel+0x8b6/0xc80 [ 827.616396][ T3987] report_bug+0x289/0x300 [ 827.620749][ T3987] do_error_trap+0x11b/0x200 [ 827.625357][ T3987] do_invalid_op+0x37/0x50 [ 827.629780][ T3987] ? __vb2_queue_cancel+0x8b6/0xc80 [ 827.634995][ T3987] invalid_op+0x23/0x30 [ 827.639166][ T3987] RIP: 0010:__vb2_queue_cancel+0x8b6/0xc80 [ 827.644976][ T3987] Code: 1e fb ff ff 48 89 df e8 a8 0f d8 fc e9 11 fb ff ff e8 4e ad 9c fc 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3a ad 9c fc <0f> 0b 48 8b 45 d0 48 05 28 02 00 00 48 89 c2 48 89 45 88 48 b8 00 [ 827.664584][ T3987] RSP: 0018:ffff88805ba1fc18 EFLAGS: 00010293 [ 827.670663][ T3987] RAX: ffff8880a1cee4c0 RBX: 0000000000000001 RCX: ffffffff84d6700e [ 827.678646][ T3987] RDX: 0000000000000000 RSI: ffffffff84d677a6 RDI: 0000000000000005 [ 827.686626][ T3987] RBP: ffff88805ba1fc90 R08: ffff8880a1cee4c0 R09: ffffed1043060e88 [ 827.694585][ T3987] R10: ffffed1043060e87 R11: ffff88821830743f R12: ffff88821830743c [ 827.702538][ T3987] R13: ffff8882183074d0 R14: ffff8882183071f8 R15: ffff8882183013f0 [ 827.710509][ T3987] ? __vb2_queue_cancel+0x11e/0xc80 [ 827.715690][ T3987] ? __vb2_queue_cancel+0x8b6/0xc80 [ 827.720873][ T3987] ? __vb2_queue_cancel+0x8b6/0xc80 [ 827.726062][ T3987] vb2_core_streamoff+0x60/0x150 [ 827.730992][ T3987] __vb2_cleanup_fileio+0x78/0x170 [ 827.736107][ T3987] vb2_core_queue_release+0x20/0x80 [ 827.741289][ T3987] _vb2_fop_release+0x1cf/0x2a0 [ 827.746123][ T3987] vb2_fop_release+0x75/0xc0 [ 827.750695][ T3987] vivid_fop_release+0x18e/0x450 [ 827.755618][ T3987] ? vivid_req_validate+0xc0/0xc0 [ 827.760637][ T3987] v4l2_release+0x21f/0x390 [ 827.765226][ T3987] __fput+0x2ff/0x890 [ 827.769221][ T3987] ? dev_debug_store+0x110/0x110 [ 827.774160][ T3987] ____fput+0x16/0x20 [ 827.778131][ T3987] task_work_run+0x145/0x1c0 [ 827.782714][ T3987] exit_to_usermode_loop+0x316/0x380 [ 827.787989][ T3987] do_syscall_64+0x65f/0x760 [ 827.792570][ T3987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.798446][ T3987] RIP: 0033:0x413db1 [ 827.802328][ T3987] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 827.821925][ T3987] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 827.830326][ T3987] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413db1 [ 827.838284][ T3987] RDX: 0000001b2d920000 RSI: 0000000000000000 RDI: 0000000000000003 [ 827.846242][ T3987] RBP: 0000000000000001 R08: 00000000cc3a097b R09: 00000000cc3a097f [ 827.854197][ T3987] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 827.862152][ T3987] R13: 00000000000ca05b R14: 0000000000760200 R15: 000000000075bf2c [ 827.871912][ T3987] Kernel Offset: disabled [ 827.876347][ T3987] Rebooting in 86400 seconds..