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", 0x1000}, {&(0x7f0000003cc0)="b7e4c72289117bf8063b6c4b11f5fad05cf2cfde0474b50d78c8bfa23893562973939a0a230c098e2a2cc0deee0ee9c131a60e3f5a64f25e6b64a9b54857a2500c8f69", 0x43}, {&(0x7f0000003d40)="87533ce510501b736a7818fedb7e1d7a3c3d10bab70d6a3dd4d4e3f45d415084439cc3bde3d3a909a05315a7eb32c38d52e058c13d68be5a7c0980fb9fb4c189461d0da9c100e408615fd5fdd733ae992ecf81eaec08dd7bc7e244b85fdb59ca13454ee051305292c83f5defcd33e99f1347d11df4ed94664bd9a37d3a5e3d72d4d806f58627ad5410f3d8314b4f3df3bfd2c7862cf34c590407e5399041ad092545ba1722e55c5f449e1f05d181de0ffa2c2e8224b1dfcbbed23b263719854f77cab8714b2568", 0xc7}], 0x6, &(0x7f0000003ec0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0x48}}, {{&(0x7f0000003f40)=@generic={0x8, "35f3baeb2834fddb8601c1ac79b2d9eba6fc4c493c3ef198f12c1dc91985b3015d74a4a154c2d701244b8c6242ccbb6c72102ceee10e6daa30c570c070d163e83220e7f1183ea5c035416dca5faabed2183a1972cf7a7cdd5ed1cfcbf7e56fbd73eeb43207bf609b02c0ce145e1e76fb51b4431ddff6483ccc2588682f63"}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003fc0)="1fdbaa3d1261ac2f4a8cf11d1ca111dd3a457000073d5b453de6ec001ddc05db43c3940c7accc7a9d1c3e46033374f3126cac2ac630e47d37b68d71a03593efe712d3fc02d43d89b48af117ebc3392dfd52f66b69dea6bc0ed1b9fb1d48fd5f102ce30902e1c261c682734a3bd1410261d85a8fb300059090816aa4821836a1b80eb25144267b6ebe4245576725d00d6fbd780b1997d3f3719cfbe2b6256938f253d8e1587b119493247c397ec38a12c8869764be97d1d52c7", 0xb9}, {&(0x7f0000004080)="b067436d1ebdbf13e2603d3d3980130af73f5b937a8b2262b2c9c36b9a8b3d98ccbcda6cbf800fd5e0cfbd3c3375ad2ec660c3fa439b8603282256fcb324ae3ae965cacc41f95d13c2780a3642203cce547bf5a0ae7d1cfac255fe70ec2e5f9a27bdf426852678348d591db4077a4eaa5b9ae686d6e3775695c0ead45393c3c8699496252efdfd714592ddc8be6871b496ca3b82b7d109988a4088277b99df64118573efcea3625055b1313ddee10833172068786f3d2d6d0302f52d12ef4ee2f8ce07e95868d4e5eef0d2208f340af6a1268b4f54102cd31d68ad7102", 0xdd}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000005180)="8f11ce39d9fee0f8422b2709beee133d34920886a47c30a78aa89c2f67180ffc781c0a8ce45dcbd4385e52b0e415504ea30d202d53b158824479c9e7214731ae0ea7e8ecb4ffd24d721ee6c7116f963ec5cccb2c97ede25f3f9120eec8d15827b2df05a470b018515969061a642867f5af4ad8113e499c7d5feb463b9b15e0282759fd03", 0x84}], 0x4}}], 0x9, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) readv(r0, &(0x7f0000000300), 0x0) 22:42:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:25 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 561.099298][T21790] atomic_op 00000000ecd81f5a conn xmit_atomic 00000000cd21f677 [ 561.102086][T21796] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) readv(r0, &(0x7f0000000300)=[{0x0}], 0x1) 22:42:25 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 561.455621][T21924] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:26 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x500000000000, 0x1, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) readv(r0, &(0x7f0000000300)=[{0x0}], 0x1) 22:42:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 561.766898][T22054] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) readv(r0, &(0x7f0000000300)=[{0x0}], 0x1) 22:42:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x31, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x96ab, 0xe4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc4000, 0x39) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x2, r1, 0x1, 0x3, 0x6, @dev={[], 0x1e}}, 0x14) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 562.121629][T22189] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) write$midi(r0, &(0x7f0000000080)="f712c4058b22d69476bb2ea3fb94160604337c1a045c56523287df6d269a19a7b76076c0d9f38019509dd47fdc83f88af7d0a7ce431bf50ba387717625df8feaa4431cbd8fd3100f52923e8cd34d3593dbd27dbc9a86bb77c180ca958b046cccf1518b", 0x63) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x1}, 0x10}}, 0x80) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) r2 = io_uring_setup(0xf9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) close(r2) epoll_create1(0x0) socket(0x2, 0x0, 0x0) r3 = semget(0x3, 0x2c83bd604d9a881d, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xfff8, 0x7fff]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) signalfd(r6, &(0x7f00000014c0)={0xc6b}, 0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000200)) 22:42:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:26 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 562.561344][T22329] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 562.583840][T22327] atomic_op 000000002942ca0d conn xmit_atomic 00000000cd21f677 22:42:27 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0xfff, 0x4) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) write$midi(r0, &(0x7f0000000080)="f712c4058b22d69476bb2ea3fb94160604337c1a045c56523287df6d269a19a7b76076c0d9f38019509dd47fdc83f88af7d0a7ce431bf50ba387717625df8feaa4431cbd8fd3100f52923e8cd34d3593dbd27dbc9a86bb77c180ca958b046cccf1518b", 0x63) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x1}, 0x10}}, 0x80) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) r2 = io_uring_setup(0xf9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) close(r2) epoll_create1(0x0) socket(0x2, 0x0, 0x0) r3 = semget(0x3, 0x2c83bd604d9a881d, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xfff8, 0x7fff]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) signalfd(r6, &(0x7f00000014c0)={0xc6b}, 0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000200)) 22:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:27 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 562.983167][T22464] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 562.984200][T22462] atomic_op 000000008dc140eb conn xmit_atomic 00000000cd21f677 22:42:27 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:27 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002802}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x79f5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x104cff6f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="24d9a011d0b38d8b181a77abc2db9151"}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x1081) close(r2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl(r1, 0x3, &(0x7f0000000000)="3dfa52944152e7a67596d9ca8acc7bfd3298a4a0f25b94aca903ccfa8e206bbc84b3714b3f640fc376eb315fc23bd69e847a20f2ddb334ee03798f33430784516f30bb89fd5de9b4918e86939f416f39f9bb864d7a18ee112290b2863a5a6c9d633700") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:27 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 563.420126][T22593] atomic_op 000000009a8a58de conn xmit_atomic 00000000cd21f677 [ 563.466107][T22600] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) write$midi(r0, &(0x7f0000000080)="f712c4058b22d69476bb2ea3fb94160604337c1a045c56523287df6d269a19a7b76076c0d9f38019509dd47fdc83f88af7d0a7ce431bf50ba387717625df8feaa4431cbd8fd3100f52923e8cd34d3593dbd27dbc9a86bb77c180ca958b046cccf1518b", 0x63) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x1}, 0x10}}, 0x80) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) r2 = io_uring_setup(0xf9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) close(r2) epoll_create1(0x0) socket(0x2, 0x0, 0x0) r3 = semget(0x3, 0x2c83bd604d9a881d, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xfff8, 0x7fff]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) signalfd(r6, &(0x7f00000014c0)={0xc6b}, 0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000200)) 22:42:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 563.850134][T22730] atomic_op 00000000a514f6f1 conn xmit_atomic 00000000cd21f677 [ 563.938846][T22825] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) r2 = getpgid(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r3 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r3) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 564.247329][T22858] atomic_op 00000000b6506b7e conn xmit_atomic 00000000cd21f677 22:42:28 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0xfff, 0x4) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 564.419638][T22981] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xd60de5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:29 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000180)={0x6, 0x1, @start={0xa6b}}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r3, 0x5, &(0x7f0000000080)={0x8000, 0x8}, 0x0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 564.931930][T23117] atomic_op 00000000b296a2a1 conn xmit_atomic 00000000cd21f677 22:42:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:29 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r5}, 0x10) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xc0401, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r6, 0x1996a6a705d8d638}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESHEX=r3], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT=r5, @ANYRES64, @ANYRES32=0x0, @ANYRES16=r4, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT], @ANYPTR], @ANYBLOB="d78d746500fdc4c4fea33639bf0de3afa199c84b99c25a27def69b8a18f3aa322b16180f6817a389aed9cb"], @ANYRES64=r0, @ANYRES16=r1], 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r7 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r7) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:30 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:30 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x4) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="131377c5fc35dc1454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00"], &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='nfsd\x00', 0x4002, 0x0) accept4$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000240)=0x6e, 0x80800) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 565.899142][T23510] validate_nla: 3 callbacks suppressed [ 565.899153][T23510] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:30 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r5}, 0x10) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xc0401, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r6, 0x1996a6a705d8d638}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:30 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 566.238763][T23647] atomic_op 00000000a826b28e conn xmit_atomic 00000000cd21f677 22:42:30 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 566.354004][T23745] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:30 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6000, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) setxattr$system_posix_acl(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}], {0x4, 0x4}, [{0x8, 0x0, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r6 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r6) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000000)={0x7, 0x7, 0x40, 0x3ff, 0x8, 0x8}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:31 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 566.555719][T23770] atomic_op 000000005df85a60 conn xmit_atomic 00000000cd21f677 22:42:31 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) 22:42:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:31 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 566.763473][T23886] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:31 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:31 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000}, 0x0, 0x0, 0x0, 0x0, 0x7b41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:31 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 567.221393][T24020] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:32 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) 22:42:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:32 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) [ 567.684349][T24150] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 567.698193][T24151] atomic_op 00000000b421f478 conn xmit_atomic 00000000cd21f677 22:42:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:32 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 568.030861][T24277] atomic_op 000000007f970956 conn xmit_atomic 00000000cd21f677 [ 568.041219][T24282] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) 22:42:32 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:32 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x10001, 0x8, 0x5, 0x6, 0x4, [{0x0, 0x8, 0x4, [], 0x2}, {0x8000, 0x601, 0x5, [], 0x1408}, {0x7ff, 0x6, 0xffffffffffffff81, [], 0x100}, {0x6, 0x0, 0x3, [], 0x180}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f00000000c0)="b1c75ddb3a945d34601f970c6c5673c5087bb3d0c4672bde0e00b60e9ebac5b8b66a2976ef628c800ea05145d22668b08cccbf0698de082fd0c110e378", 0x3d) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) epoll_create1(0x0) r3 = socket(0x2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r7 = getegid() chown(&(0x7f0000000140)='./file0\x00', r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000200)=0x0) r11 = getegid() r12 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00800000", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="0400000800c17d0400000000", @ANYRES32=r12, @ANYBLOB="10004f2c000000002000040000000000"], 0x44, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600800, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r13, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 568.439226][T24401] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:33 executing program 0: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x1a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:33 executing program 0: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) [ 568.713762][T24527] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:33 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:33 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x385}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:33 executing program 0: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 569.235307][T24666] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 569.245517][T24661] atomic_op 00000000ba338dea conn xmit_atomic 00000000cd21f677 22:42:33 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8001, 0xb72, &(0x7f00000003c0)="c36b1a47eeb1329d83539a81534e0039a6591670605273b2eff04af432b845baef5de5f453cbb3204e2e23a75287d787436d888e247925c338f5bb6de56d9b420ecac91e1a0b58669b09119ee781a35be912cfb44d1717ba0b2d4b05cf0711a14b74306adc51e13539789ead38ea65a1766cf2c515e6884d99e61051b950b6c36deba171b61379207aadbec1e9e9250fbbd72c4d4bdb2cec3ac6eadf48257b21b1da9e6e5ef322b085aa0d11bdd009a4d2ec1e3f4197ef255b2fd4f44db0abd18abc1fe9539330d3d03f027e7074b0c46f55e5ffcbe69126a5e96dfcc22df54b1cc5e66ee35836ff6460d64ea9e421cb0f84ea3a208414e156d1492233614939bc40362250a5c0d7fb0ecddd49a6a2287488fe57922d5f4411486bf7106bf8b5f36c36b09a394c8d57645b8ae2b5453f51217c59a77a17f40feb5c526d561d6936869471f4b9ba9cfe74b69c1a3009d99bebd9920d77745a5a60a730ca47eb032bd15bd3edccfad2565530843264a987240f92a63103792bd4b100d79bac9f4dd51b71dea9c5008b8e36c1793ce9f2f31fa462ae1d58bc29d7549b8f7a5d3b062d8c452c15ba29cdfc35d2a57dc6e6c9f97406c71e8b381adec4325c8288d34871df8ad84ee17bab9968b763bfe816204421d9729be24b469f03257588df2c7cd530050236d85ad80354deae33a3a40bc10a28f19bb42afcaf2754ddfb899c9ff027dfb540ba26f5550e6cec66a22b53be62cacf9b4087524a821ec5d1561f9cf92754e32e9edb8925d5d20cb9fff7cb41f7f02bb8577fce67b72352903a49e244f9dfdb9f1c92230e70c3fbd84c95bcacc357b8c4856dc284e1a93f9fdce6cc45b632c7433f15f8aef4e1fa7ecb80925c4241bb25607feac3a149633d771f98e40904e672e523c75af858525e7333e3ba5daa9657ce8839804aa3a7e7d82b00bee8c27dba76bf5732e9f283101db82418fd4093432c7434fa483aa2ad8e68313e2adee31900c172927c726b47e72949b464a4a0bed62f1492a9b971b376ab840ce69290851502c5f45dc50e5eadeee753017e51dd63c5949fed3427d3afc455e6607887e5bd64b0a6bc3811ae052e6f8b0e67214d30e082252a02ba9c1173b610de4b1d63cb1457924d018f39821b8ff2df271fc9c0c4807292d1943aae4b13912766d384ee56e32f3e06cd37b20659662f34005fb3fee8f45792f75d218652fde3e5a75d855d69d151bff2e642055b55440ec4f5a28426411aebf266778073fe93f3dcf471eed64e1e2b2c1883b670b96163ab6189da33b3b64ac6a87bdd69694fcf9f50126a87ae37e6bed7f0b2c7ec977ad0f52fd019b7d919bdcafb21e4f573d02d5f3effcb8a2bcc6c0756168d41d0d110e6922c952392540d17e634ff6426434d65bf61bd4a5423f65aa56aca296e94b0e8423eda1a8fec3f6b9ab41c73992e930b0730c1ca7193b1eeba79becaed2797121dd84275d819ba99814ea04e16e6b502c8dc79eadd8dc2a2b332b7d8e951e6ffae12b35ab7c28a6e66fef0c0f7e15ef82498c7d551400538deba0c1dba180187aeeb060a831c0256d351f68146e475bb85a953f76143f899887545b4c7b280e8e5d8a8ecf016914905defe82aa273c62d12ca9fc1326a4f15d43c16beebfab337340558e7270bc666265fa6a993d03c8f3ace8a376b123133d388a2dc0089324bed5ee685776869abdbcf77e1e5ebe100a277f0d99d497884a8d7e26372ef58ede28c36cd38e09e326effa9745b743f60a59868d7ce4b2814ac9ef5d0fbd9b1ceef8e207eefb0ace85a628b3ecec4f26a79970c30d12fd5d24bfcc1ab42c72c0803c2b0a0414414056ebb7e9a9d14197d4906abfe74360a2c3ca0304f2b6a58b32dd6e22a34e41384e383e9d6b7ad7fb027307111fc621385d4d51f23e48bfc1bdb937b5097813b5fc34a16c9641fdbeec5f91c34394ca088543dd04e86732a69b07cf7efa1bdf0a0d3f8624ffe4164cfc3c6af5ed8050136595d1dda9c9f1fd27529f3bcea761533c70d4e8d1c1439a8a576f93953fa76f6dbbcb299f9a9cb7c6dca13f366d0e45998f356d126866198227a640284a5cc8a018123c8ce3546094316899f88c3a0f08be8c111a1323677cb577e19800a68c9a97a85cfbf018cdd03d0c3cd8428d2e5eb4333f2dae0dad8775a619eeacd2fa804d93c02ebce17ef7c0514adccadcf97f08b440eae28cb1c04bc656d6711b9856e32d88bab9b7d3c369b4fd13f45a46d7c32f2947401c64edf028c24699a8e6a31861ad321b621939dd8e96fe5f32bcec7ac1ea20d254c6f17f84a949bb66cd2ebbff8e942d541b962ed46adcfd2e4c562591f4eb9e6afa8214f1ac0bbcbe923dc4177075e5e4c45fb09721b878efb6115555c8bf07c11695ee27f07bd4df3f0e498e8f01d249f2859161f3af97967bc1633c110e145522601ad303822f0797badf43fd1f93504bf12a149756b99362a79e9bbc63c946258c3d2d7cc09d7d9852c9297ad0c64797a8d244ea52546709f195024299feb90b7ab8e083eefc55ca66e8e1f448c1d3cc8275defd90754790b777ccb11feccceba677cdeb1f74522787fd2fec6fe0706bda83b89ae4e0544287517a723ffdafc22d49f731e2c676a50fc7203fe6e25d0a5dcff716be50672e8dcbcc4d99824209b2aaa09ba9fbbd567bb99475179293d4021d8988be8afcbdb9e6a4a85fd5c428ac01eebbad3ca0f117592984aa91299cd8f13795fa4cf50cca7b6283ea4ce1e73866c2b7e8d9b04c04624894117ec97fd0cda431698f89dc74afb524d0fe9135511755a4877aa01bbe9e68257941baf02a3098ce1f623914d7410343e135e04d885b1f0117a6ccf9f7787c458655c66d772b78fb2421f0ba0827b1fa3b1460d2ee1865d929fac4d4c4bdbea1dd36b67fe71bf717f1fd41ef5a9c55f45caeda55f329b50648ed3de7a9cab45895734d611c0f11c6775a845ae6130e49ff9348ec215165519a8b6cefda30ae756358cb7fff3a86d0736ff4d45a43074dedf490e48003e9e6c3904be77b208bfa097a0139ca04f57d6586f43c5f2ffa7f58a3445420c9735ff9da2252a1e76e5f6117a9889261ff01b0088278b4478371c5c7f5178c00b47d2ea23398252c28959e4d661bc4c6fdc0171a959cc7c54d68676645bafe5477edecd05db898733e4a51251a2764258131a2b6c6f640509254c3e43b3d051cdca48addf576d9efb17829c6fa3ffe1f7dd77a065ddd4f4d413c4d486b5c5c9f1cf4d00361ff0397b6b2cd8406e663500b1570bf75853801cfcdb53258179abb1f7a46f894fcce9e997587acfacb7f07c00cbfdb50e58645861722db98da9e4a8bd163f4f2d6240f8ddf10462bf0be653cb7a601945e84dc7347741c634538e0be75ccc93a5bbc3c374f0ec0c012595e017a5c0b21035f48d2abe6d666a7b197ef14f2b8ae7b398f1b6960c80f1ed7d96358404e1caaa41c59ae5d11dad7d28a92e1c826ae923fd5866a5322d252e7841772ce95d0c164f179c217e05619c56561a6bcd47110565b3b64fbfb3a48d787dd3677e88d169e3d1b9e20164dc72952e12f6e43a7dd5069d43de5ec81142e3db1d6f080eac0f23b729bc50aad32a6c0d765b12a53614097e152bb16c73c2a00d0858359e0d5afb9bb87b15eba57fdb9f4939010da3424a026480e7023834732893edc7f0c6c3dd1e17bab67fa82269e09d8b38bd4475d038a0d6de94910051746b0f353affafed50ac9f370191908243e65b16ad5591c427d507e2a9c4b602ff7af720db895f7123093fee915b43c0f64496799f3cbcd13a0671e333783b7c25d666e7612948e48d81bfda8b4306f3d2bfde4ac3df6da5292bd062891d911595a0651bcfa09d64723735ee3065256d16bdb031a7d4ce1f0eb833d191a211dbae2c72db011d04050db93073f4f5b114be7d7109a3b2ffd0d9c7db6ca9fe02828549137f1bb5c25d4db9905db040e15e2bbdf7924190fec1bd110e82c2571f9a381ee7f46c71a268d0048b800d1c690a2edbc55e1127949ed040daccc861e7d7fea974957071b84b6f5e92c4aad299f23d6141cd1f6e55bee4a0b41a5a7f8a2a37683de106924959e3fd856d845a5b0220c16b45553b291b488d74efa577d6a143aaf2527ef0e5aeb103383d741370780a93ea8070986349188b840f8b494bcfc1c2425b77e7a10542bc343b70dd6cd4393c05b604d36a41c27e86228987395abf4d1fe780bc1d24d9a06da6a6dc9bacfce26cf8c18b7450d9632331ff660b0584bc7e6241ddd94b49bd259a3c0cbb80dced57fdb2c4a5f5cb93b5b165d273574a327252d44e04b57bbf98f90a1716abb091cb8e684fb31ab3e2ebcd72eeb922c5589754ae57e0166dde9f13f45ebd65b4a3dc2f0571d7662f1fc43f349a84d6dd865a5e3f8b1b6648c2424fa93af715eae59daf035588559f4dad6ad5fdb6650fac7950692e821cd8a1015efd84db9790927ae3271a9bb76f1faef1d1470a680a79070942a026c4d3b3936085255365fa7cabf005c13ae81341fa3a65a886991be86bdb5734757150d33203a7bdb33c6d5cfb0faffdc7d9b6198ac8dc813ee14f387140a5b4b0caee51b597b42a198d311a63bd4d22704509d193177b5cef9b27f413487210fca76a0941b49d3337015a2b361daf0eaf1351cba069126788d16733d4c9270bb933877b7e31047cd64607287d463231e32dd15c122206ab2cac5c15bd9b2ef5a42551e9d12c22984bcfe0858a4f397c76fede91a020b6162a6b92277eed3c1976d51f5f93c934f5af43444e9ffe012f5be53e243efc3dabbd7c5f0e64a954d5a2c60f3f9b5dabb74be213074ecaf167e03f3de733c3b60d2f13a68886d754c9837bbbfaafbc0e4a512943dfd71820d74f0705ae805bc27cfd421f6f022c71be1caa46a606950d0f9ac40a5db58b49bce35a2214fd9c7331e7fa94ab3e0191e957abd73b771f1337836fa2ba7dc67bded0094863415b1f8acb5d28237ce2ae22d13158320f072aebd4ea3f027483e0d55a1522ee18dd0de902f8c39c86be054003e1cf960711468f4bb21d7cf9d99c914d7bb21dadf7c84dc7959317100df25f66ccde3f02b8fea258298ec90e7f16a3567d88752bc0923dadd08c6ef7dc1d02c7c0bbf43bec3d7196f758ea2531a1e21f4278d51109aba84cf975c6a1644c05d4d794d71d390344577e1e2a8cdce917f056a8fafd1e3c64ea113aba5bed22d18e4e1dccfb38127372d3b772a79c593c2fa28b8039e44693112ebfae3e16934c4d97d957fe2996b982e837ad1e1571fa03abf7e410ec82c364aa7083ae2ea9dbc9cc0b2373eb215ec9888d0f8e652c3da0b6cb862d58661d9f9de8b9b3c076a293a3ccebc3c67072e0c5c9d42372b3d91ae473426c74afb184e0d29aedcbb85656bae864e1b08ab1256055ce9c36bbcd29b9fb5a5ed3a285609aea8ebd9f9e5d5c3bdd67b55221e1caf8bff6c46d2072a4609e71467e15de3d701d92017080135ab086da39c903c93ef7fbb28c96dabc16298c5c6d5e43b6430e3b2da34c3d5b1596cde716257681fe4411f30ce3963f33b633b6f923e43ff0a383cbb5bbc28d3d42407a171fa68824da96b4f9855999c05cefbdeda14e4cdf050b365fe3b5d0014f021f496ed9f5d6657d4fac4f35ff217bbc08442bc54435d1f69c4672eb14b012db9341bca3dea587a1bf5e9f969a1b07a34ee729f84072700113e6e32eafa96cb16b322b92b746e36dbfc1e4a7b5a9a9524d4796337dc4f024dbf09530c083618a8", &(0x7f00000013c0)="44a759f3e88263778abb078cfd5f164e272abca0b93d03e100378f0e57279720b25e513456855397e6e56a49f1ec2d4dcfd3ef32c2ce9729ff1b40ca2ad787169eac86c828225f255ea287dae9fb737b216c20284827081e6de9de5bf837da3dd9f68607b24f74fdd8ad6c7b46beeee633e17816b21f10f430cfc11f5367fe7c63c597f6c824adc6f290ac5c76c4ab94d4468a1498e910698116a7c511baa1b12e54427ff207801c5c5128a242328e51726ef5c2c2ea3e8551ad6c642d94157701cc2540c83692f8adb7b690dd8a18e119defe0420d9c717114e828c49e7709ad6b1429f2a8a0301f5e5234ecfb4f88ceb3e5f681abc66520e55d72f14066de5fc665fc9d42e1729f447c7b559b667a3ce8f4e622eca6c0034267bb9c33b112c3bbfb38c989f8fc6bc0ca347712cadf9faab3cdcd0928cbec0212239062e54347cdb308c74faf9d5bbad6274f0f222822eedb9af7705dde48aca510d2805041f8d77717d120b92c5f008899400e6710293e2a52ff38c4959d39b6b43f69be10c03e36d7883f8f2181e77d9a834bb495c5f3bc77117e02daffb9e991aff1355e828c4c5463c6256bc2ae3ae6d8be69edd165e38f45a26cb56ceb5bd0713a489f67057b014f39124a1788c10a8d3bfd258760c0461fc23f3bbcb82dbbe314e85806466876a54b82f61b4171c7e6b24fc5567c702f60529c5600209d6454266a297e951963362deb0c545261098b457c3c2285985c98e3b5dc875f57580e97581a48e2709695718c3d6a1e4a1b0a836da963362bfc4cb07d17ac152d8bafb94e6d86d68e218d9efdc08185ab7470d7f928b10ccde7e4c7e4e06ddf1c60a136889672a88e1a231da7c68a091564e6d3f542b4949172aba15ed93fc7f17e1bb98062461e517fbb446232f3f3de55d2f24e9b0e0f21630461a22f2335f410380bbd1e809e504ef9377058b5182788215738e765448ec0e6d4480c4a6093fa7a4662378d39c65ea44cf24a3043b3103c5018abdd8e86d6234038554703aac640fd23b361e0d03cd86a9eae64b78de5182dde359c7ef7a20536521b1775bdd2d380dd62aa9a946f4fe854621b22aab1877d0b71406df14581ea1630273b18a3d2cc9cec58e4d9a4dff20330b7f2b85520b02579a838c2c2a431e2fd5242370ea9719d1b1477602ea4fcf08c660e5a0a76ff320d116cdd1fcd53f42eb5df08acb4d7a658ef27096b2ac63a8424da5a620c17b0c58f679ea0f6d9edab08f1c4b1a8a7e6b8feafdd6b0ca4adca99fa0c7890d689100d09dc2e78e4105e4506276eb8c8358658c107e8b2a40efdda095d432f5a33e00d5c3957bf4715b8f55a390a08719921beec6c6fe19000a70cd309d3f8e1669b75b79cc58778d29f73e6f7e279fa70d8da14560f05b261ca4cc49e3e01f582f9b72e57f1badb358e584e492de65d8c50c1e8c35b783a9214c9526c96814d7eaed88e19ea11bc9dc14d76f31bfbc01c7286bb6f308e94243dc8f835a5efdff2244d192af9671f3dcff8d5ae9b7a19083bb010bf780e2727fe4ec40a2dc0f936e38784a6c0713142f0bd0362ae20d118a0a23ac0034da850587116e893e23113c8de8783924ee0a2c1d38c2268f9542209a8000e3412831747c9430ccf45165149ef2a9c1a1b79bc59efb775bc21df441ff69b2b69bd76a4a1d3e07a9846b1e0f69326b8ecb097846cdce67a0e79a7f0a6988b665c75571dafc21acf1fddfdb44dc6405f18114069307f0e41159d8943aca9d7274809f9abd683523cdae4b8858ed7fb775a70b7d194f030d4d649cf140388176d51392b23faa68fc67a751f34e1a550a9ba3fc036dc755d4ce6ecf384fbe8aeecce3703f6ce04f0873f7c047be9f11d919270b6f97b4163be8693039354052d55f35405bda28776cac6c9585ea4aab7c2b4ae50424f73fc96edae9e5be18e2bf3e6a8d5936e2367c4ea2b3c52690e938051ed53d8878399bacb507f1d6cbdb82c639452115ab49bd153191eddda327ac2a2660580699a0051b640d22165c14f4931071c06225839c1fcab53dc558cc3aaf8bdb1955a80ec9d3f7fed0ad01d9c81d3b2eb2bb937374876263a6d801e273c6d266302269186dc77c7c4b6b2fd93bb6bbccf1b033a7b76e1ec169950a685f5a03c2a47f0dcbac0f5931a4eee4fefe42a0e7fb5bb9e5d73f4307daf116fb17f1ca85ee42954df89defc1e30e3de11b09b4a406743af8f3145c8439f0ab37564644709937ab50ce30139fced45fe471c9754e281363fdfa1b07c260d4a826d2f00de998415e0d094a11445a9108d7e133aff40750b91d093283b2d4d247f980605a34696e0e51673b0aa37aed9247dd40ef61181917fc93faaab42936a85e8a18372c2120a2063275b6c115a8deae1e2d0d99e03cf3d942e22af87b5b8fa681fca725a0cc335cae7e2cdc4048e805cd6e8a11e1a066169707f7083b5e957a12ec0b455ad0f35699041da483415802c5b5ee03dbacb799e46119e290e95ed99add6e57918fabaa02798b130369ffbd1ffb316d0cc2be1574307a78410d204f8dca4c192ec9292086bfdac212437acc60de473c5fea64423ff67ccb05c07343d29d1ebb370d651f094decf1bf048d1dacd6e6de2d026cce1e7c7c9cf7bc54175a19d5f3677717714b5eb7f90398561efce582bf2843a95a74b19b059375e61372842fb361cfa68deb7702bb01925d35c663d199a04abe17c55ffc526219fe6b60054c5ef8cc3052e5fd2be3ea6a897dbdc058930649970eb39f0a3bab5f545ada691311bdd77cbd481dcb10b6933d4ee5ec8a005c8202afaa5032f103d131200aeb44c8995ada02c34d0fe9df073918404b312d5b0619b16bca960a822669052dec15460a744cbcb4496e3cf9edfd536dab4e2fb9b71248c9cd2fc9d85b353a6daad74ac3b4d187e96b2f4b2542e6e86dc9f8fed5c23c9da7e822809a1426ed923345785ec802d109bb72c8363499aff98e690f6b6bb51c8d280f5687ca6dec78af998a5e3bcd19de78ae208adcba5359fb01d04e215deeb08e6692ea19936d10c76a7002bd90a2f764727f13d057021c272935279cc79aa147fb3babaccab37c0ad46ad14c9b8c47d8fecb26c2fe7035d55374725cca2b6eedc08bb893915b6ecaa9f1d46557a159c5e465cdb436358e895d1a6276f485f0cbcf9fe3fd8dbeaf3f20f46e6ad469ebb5f4acdf95180e61fa4d5de2b0566efd6d02391f8865c4317878534dfe0d4c26228babb360d488323a86f582fd4e8f9fdf41e99788947f4f14d0effbec13c1c6f6aa6f11c16003a8f7bcb8eb2acb698ee0746ba9bbbcf9d5790e53cec818d5a2c58ca5c2f316eca2803720241562e732239e03b1950e348c68e5fb9e1716b896193b12bf86888ce8a91da54c1c51414959f0ef2eab2c481da5152f997741e3ae8b5178d664e5f44c5803c95a6600d098742f774087142a9f3be261438dbcd0e78e39bb4039ca768962e9026c3d1bb909c474f6877bd9598a0ac8bbeb89cd168926e6c3230eb28d40f08ad2357ec0cb52f5ca77dab4c7a8b9bd3cbfea0904dffcf287d1324032542280d9c13e2c829ac9e80756c6de007813ad59452913033b6b2850eca4a80623848a0b7f9de50cc1eb305e370a07bbaef1454c43ccffbb97ad6aeff77dd5d7796bda142d71fd9cbe11f9e8ad4043e26aeeedc05512c52d8eb69ec95372e3d3fd4407a76a5ae87a849f38cf0fcb2bf943d8b7c7419571d21730a05f97f1afe87bdfda979fb2b15fe085c6e2136df5c0f537bff4e05a1ea33aad78a4163214949a1116a4eaf1d515e9cbd00cec8cfc52782791d061925d37098c0b3c66acd9360db8094a4eccf8a949f8f7e4c085ad26422622ec473e3a57f931b7e4ffd242cf32558bda17dd49787ea4f0b8d0ddb67cc354aa608d90c520b82fc475de4831b7e4cfe3f3645bb1a3a627f82e337efcf3ae5ef7eaaa0ddab9c972c8b32e18c54f354e6721cba2f43e71292bb3097f350474ee2e7be0e5f4866686cf952beb403c49374e60aebac084ab627c0ad2f50a9486b88bce83984667877406a5c842585243653c4aa20669332afcb8d7e9dcd7a70475bd5af5686834a0a72be4826fa0b32b7e5ead4a3fe40171f6728af61f852e388fb0c9938bc67326d62f35f4d5cdf869edf377df0a2687321b21e34ed1ee0d6913206a73b30aaab7ae5876cedfa3e9f4f85eb2f576f4456a2c2a0feefbbb0ec2769e04e965e2b040633309a4460d390eec43c839638f7ca05222a612abfe8aedd86aba748e1e2c2609f5688f35c3abc81b5774bbf49096b92d5f3cb5665c5b561fb24437f117828b3460b36e6c49737d1148f957e82893c28ee7be3aaaf21ed93f17230d556f0ac8970fefd61731c244657801b05ea5bfd95b514770dfb3e9f607740d4ab7bea0819eea4e3d12275eb606924c0db01ae031707c5c6ca643d165f0be8274b50aa59f524ca57c92e2fa2c8e803df7da742920d00563ee892b4fa471caa27949fa7baedce56907ccf6fe9912a4de3b912885851fbfdd7637b738e756ad498aa537b53dd0e5755532a5eb5271bb8ac55b2d8f4af07d6742f9d8e7c2acc09f4867490c760a8cc1009de336ed9d0e3db79bc5c236064547779a070370cee024235706ca2919f738d8273f989c047d54ac49a308f7f715e1f58c883bd25aecb906192c9a22c56ac5e98e9d6a14606a00102f9a617b821921391c938c99a0fd8f37923f21c57a72e6917d7a2573641a2e0056ceedafb850e0cc8d94f417efc60691767e5def9ed02f90a29797b8d9fbd869fc5b65c879cd1dcc3906d6bdadf13c59e769e453f923aa7531f57920cd128a2469f37bcecb055625b19657e85a0a6122eb61dbb0f066304e2fc57587f3d1795c3acda6dd2be6b85e12607db724e0287681f8b0f98bc58720cf89fb9d23a15050f4d962b1f6a8ce522dd9aa610fcbb0f22d90cd3675d400d7e2ad0465205a0adf2c68ba02e89483e185cb1bc59e66a1c97d0eec99663c391d449370f06445c02f49de39e64bfc460ac735a9acbc6ef008b7f45bb7506de3c199757d34310de230fb5e96c74dd458c1a49c5fe0b2645366f3e0dbc4af8cbe674755a178dd6837f3c70edf74e72085918f0867fdde1f8ebd1f83f5f7a521df168f385d106e6481fa220d388a4fdb8595edfeeeb66a1d32c9817fe799292d3c8a15ad83e705a74824817b2c723ab85e55684fcfb938f01fe09474bb13ddbbdc6d5773dbbc615cbbbfc7ab3b360137d6100119bb7cfb011c311bdb4e44c77923cb867017834970edd890622a2075e8312e63a1efec5ca516055a9979b4fe9b246134280639e14cc38b6757b09e3cd8c3890232527530c3d353d9a71797e8529b4fd884652e697ca133f103930b5843b271d47d7ac79eadd06667fe1c09cbc15278afb3871a6746344b35463e4b35b7afdd9a803729f4d055497907d4a0530ed4f6a5da8afdeff01cef2bb516e20af703586e4ac66f59028c8efa9237f86b20f9add128a46b7a32ccd861287bec0c87176b9ecb0bb7fc276b9a26bc2ffdf415c4143257124e206b2e6164e3fa69b34a67581da14723e595dfdb63a340a6e52149dbcf8dc333d367f076ae81237464be876a024c8acb8267ed323e249bd90731c878a799d19477d36a188d80a4c812e5455dd15d2ec57486cad44275b52443205d6223dcc1bdfee7ca7ff9d66844b954c0d5f78b106144426eaeed4208a0056d27f34e77b94547aa200e207f84427da1b1adb0553c890e91f3232ca1fc1ed1df6381fbd01b", 0x1000, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:33 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:34 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) [ 569.564016][T24786] atomic_op 000000004630773a conn xmit_atomic 00000000cd21f677 [ 569.656755][T24794] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:34 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000002140)={0x690, 0xa, 0x4, 0x4000, 0x8, {r4, r5/1000+30000}, {0x0, 0xf, 0x3d, 0x1, 0x4, 0x6, "74b5f833"}, 0x7ff, 0x4, @fd=r0, 0x2, 0x0, r6}) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000006c80)={@ipx={0x4, 0xfff, 0x7, "fa50ac69df47", 0x83}, {&(0x7f00000021c0)=""/55, 0x37}, &(0x7f0000002200), 0x5b}, 0xa0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmmsg$alg(r8, &(0x7f0000006940)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="54f7db36aac73fa5c74a8068fcf12853a9ff1a3acf187441ef774a2a538c19eb84c538f462364cfb3883bd7c24f9feb38a7f893ab728f96bc14a62c3cd3f59d221c31dcc37995b5dcfa24e", 0x4b}, {&(0x7f0000000080)="a948bdf0198a81522f8ece25a7f331874a2fbc4db9c001370231dbc40475541541a690ce60f2a44a231a5fb0ae9cfe30f501b9900fb612ebd4850258685544feb5f63fcfe296ea026be197b8e2b023cf2f8a9e6c11387ef8184cc00ba9f93f80d895e2890014c82f4b3f78e04670f26e031666d6ca115521fa6f", 0x7a}, {&(0x7f0000000180)="492b2ada017dcbe461baab2f", 0xc}, {&(0x7f00000001c0)='`', 0x1}, {&(0x7f0000000200)="cf363ecfc0a7ca8f8346863b2c3177954daa6275e069cacce02e4734819e07e35c2539a625b485bf967f065186cad40db804c0", 0x33}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000002c0)="d4790d0cd464b8594adb423efb8bd637387f4b763558da9dff1ca3967dabf51a3e3278bbba072a103b739a332b0cde2bcf575e6a54a517a1f7800fd48a341d7594890f3a9fe945cb29d0a5061763f1832c28e0ce11d6cd127033f71eded21c225a95d26dc74a4404faafe1a8db1041e9fc71fb843fc8d1a4f3eeba74702654c60f98a6ca198ea039df6971cc82a0921f56955abb002eb47a7608", 0x9a}], 0x7, &(0x7f0000000240)=[@op={0x18}], 0x18, 0x37479b87109d9bc7}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="ceb19c02459d5be451c90ab5780f6a09bfd885097f73a48d17d46678b6995f558c94eb7ae55a06", 0x27}, {&(0x7f0000000580)="d7df4188ee443b4408b9cbbb8d97f4dfeeb94cd5f982b3446746eb3ba5a8fd016301f385c1c82fa441d80c712a9874a779099d231955ff8e935ac7a727a0b6360512fb80abf2538baad33dec633d473b7960c56da4ed329c78ba9ee87a9df5d8be59168ce0095b8873c6302634890ff3b3f49bda960573f7fdcfea708105d697f1f0f48e0091941401d30277157b75ed43de12255d7c99da943650c5c6e8f57d85ddd3c1c317e78849f7ccc08dfd7674e0c390003d72e76c1de80b4a", 0xbc}], 0x2, &(0x7f0000000680)=[@iv={0xd0, 0x117, 0x2, 0xb5, "a43e3497eb4b3e727aac2f3e890a4a77125abf71c759b06528226460613bbf18c96811c6cd0d15d7ee7b0c88b2f5a0661dcfcfcbe9cc2033b834db9c51119a1ee4532e9926bae0279a36ca59aa8dab7af22aa2ec42c5c27155d1f4dd35c5a996a3fd4f95dd0ff93541dde7248f991ac2bd60476958366a246de377132a675bba019d6aaf8b83341d7feeeae20cb4e0d51d8f9820ca82b8fa509c624a13b4c643af4de1687ce3a6295f311e4cb5b75463d46fc81647"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x44}, @iv={0xd8, 0x117, 0x2, 0xc1, "1aec096ad2cb9f27b7b296ee8d11628de949531b9672500b65febb7269988a025bab65df4980210ab5cb535f47d0fe74a24a3730134da7d9987101049262eb32dd7905390ce8e95d6c23ac89a584b67b2e70683079a0545d4ea130e854d411bcfec67c6842ac06ee718a7efd28aa972e64d4c64f0391241d467a123ed39dc239ee994f93d227690742de3fe99711708fe790df125460f3f74477fd197786ac179fe494215e0bd3d364d23b84b5dd345629026e1219a9d095ace32a926505d91c4d"}], 0x238, 0x4782b79660cb144e}, {0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x5, "510adad63c"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x80}, {0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000980)="4fb1ef3b2a5bb5cee0a54569d0131eb582805f0e173925da3947a99704e41f66d1bde97e1400ef9e897705a6fdbbe54a02a4250eb9f4f228280bf2d7658f62e168cdc5206062a7bd3c96394a5bd0ca890bb7d4cf7b7ca222250c6eae373fa88d13aa9583129ac7483d8ec2011dcd4721efa6208d0af86923ec90b71458f12b5c5200b9e025742e8eff6d62a1f352d46312f71d73aec1a082afc46682fa19b1249e98", 0xa2}, {&(0x7f0000000a40)="57a54a5e874c01f8159827449055aaba691bd2991110683eaea5a5196b6f4c2a68b567db76a83000902e25ad641ef8657a21be3cb504bbcb8832bd6da7f76b1dd5d723b73e5b8a0728999d1255ee6c24e9f0c32da13fc56437f5a849c3e50e98d69f00e84fd232328f8f20b1766935f633057efce34df4638de05f8f95a9cb1bf347f64b75b36df0701633844856de3f85911b14e045e50ba465fb52d32816e180153f05644a07419417e3aa6f6e10e27b4eb0280f61d9721383607898c9375c64c5f53dbc7ebfb99c3d63007d4320866d452c28870ee40cd3999b8037771e", 0xdf}, {&(0x7f0000000b40)="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", 0x1000}], 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x248, 0x20008410}, {0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e00)="595d1dad2078beae7f4b62422b6febbb6530dd865324ee001fbde749b42af0d233c733786f1f19cbd6563fd9df5842efc8547af2647fe1997276e16165b0119ce00fe5b92f520398e39be3aaddac7870fb463009fcf6a6e6bb77b2509f87bdbdc9ed1fee30678c018b6e31d64f0c14f6347cd8304414da4fc880b5e0701a2cc5d377f2a464d9a5387f05e178de047fe521713ffe8d422179fd4fe7819729e78ed23ed6636d64c8937695557027ac95f01cd7256400e270a4892d07ef613fa568b0b4efca4a78f9acfad8", 0xca}, {&(0x7f0000001f00)="a35d3dacf819eb87b9401b4e60340fea86bd65214031cdbabc66f775a5e5d3398eb16ea8a04bd308e995e61bf4c49726251bed85ccd9e022d1ffe261b157b9f3fd2bbd309b1ffedda72475c88923fb2e25daaa6245ca843d004c265f9bda20d2aac0ab44e08daa0884f3108e0ca7c6fd8c92d4d74241fc8c184d72fa00ecc533a8ce6574a425dacdaa6e6b60bae89f750ee6a5433697f5089bc3243fc8cd9f1c8a63510bb89a9e3c6c30f1d31f8e2fadcb31b2d20c019e41a7e028a2505328073314caf408d8", 0xc6}, {&(0x7f0000002000)="0e76ce359466b3ff3b2fbd8053352e8ebfb7764813292ca1fe97a5b1b36f036a29a2b53d4e810e5e0288dee86be939a4d35083bdb95225186f954dde301a7c465d274fe7a521de3a5a455e51a407ded08a9b488f8314d42e363fe2a955b12e60c0f3837a0d745786e5ebc46485b2090cd38e963d395374805e9276c2fcfac60497a3b2b4190484166c6af7c3c07a284a2a404a784d6553b559419389c1c4db78d32b1a1eb9bb3407b10adb8a8b93b0f138b6bfe0c21e7a4ed9d54e8f572a6f7ba8b044f221df", 0xc6}], 0x3, &(0x7f0000006b40)=ANY=[@ANYBLOB="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"], 0x108, 0x4}, {0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000002280)="2d9a9219e90f46658c4673bfb0917c09b0e0a8e253186210af4834686578a17e8737eb111b7b82c5577b81426f48d000f1f34ae57659ab275d937d45d754ab8377e844963b5fa128707afb6e5d09629cac15dda81da2c3e28f2fed77012177dbbe2b3aea0b2d919fa5faeb671dfb7ebc48e42b8ab9a276a6e93a8eb167c612f0d9f6fa1ac4923b48488c7e6b953b538c49e460a77d4399ffb48fb393eb", 0x9d}, {&(0x7f0000002340)="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", 0xfa}, {&(0x7f0000002440)="da2d756bc644d3cf40d5eb46071c0c80a282a90f60b64b45a6d42a", 0x1b}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="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", 0x1000}], 0x6, 0x0, 0x0, 0x957a46a082fe2cc0}, {0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000005500)="abbf52a84d8ae0f63c131390d4a38a074efbc026c3698f298efc1476a605b93b749244ba6a9103d349387745df3e1543dc6f9fd508077dbd0cb4d2ddec6b5580d9d9d36606a17a60403ebb6246830889e3cb8114f5439bcb9c8ba741b8580b07cfa9cdfcc409b54d800c9c6eb15ecc", 0x6f}], 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000005680)=[{&(0x7f00000055c0)="277128028bcebb4a1703ba3ff19af0de96d4bda0ccf3cb584de7ff3fe4b95c02014e4b286c5132df6dd0613c4e8189f6909330a18bc6c6c90ce97dc3b5f65a895a3de589a3f0495a150b745dcbc7f9c2c64a4d98538712dbe362f4798a1148d28f8d288b25b45f15af33c6a23efe3b3744f9d6c862a721bdb7ec23a3e3ecaf6ba87532d6fe4230c3f9e4a851c10301ad1e7490fef9ee39574855fdd83ce68ebb25342496975eb3b19fb5cd96c9392664304e39", 0xb3}], 0x1, &(0x7f00000056c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffff8}], 0x48, 0x91}, {0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005740)="9999ca27c57b0dadc11984f1d72e5bbc2c6999dfdd62f33c9d16c350ab00850c8268c729336f71f78dabe74cdb0d7874214898929d9975e830056e05e056f1dea2aaa5ba81f3adcce6a5445d4e68495981c24fa5834984924f3ea645b8", 0x5d}, {&(0x7f00000057c0)="ae060b37d52fc2332b72e137d7076d8e6fb7c1a711babaee4430d38c922e40fee4c70eba80aa5eb8a986035ef8e43ec16558b7fa53678595fe4f3568fdc9385d389ba43a354bbc7d1f9478f672f9f337096ef88d67407a66c03d256d9d894eef741b6d5f6c171b4a53a1c3", 0x6b}, {&(0x7f0000005840)="955b46b222af2e4eb17258fd9a9b32418c225f31ecba659fccbfb6870ef15e629db47ede659d7dc9bebd6fe297e90ffa5c874b596289b45a2d405b54d9af2441ce1b06e623aa1d028e203d95bc0ef8262a1ce2f0d229086c5e08b2431b7c8b1f93c9c7ecf9cafd7da7e83c6ceafc90b87d18492950", 0x75}], 0x3, &(0x7f0000005900)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x24000806}], 0x9, 0x84004) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:34 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0xa00100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:34 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8001, 0xb72, &(0x7f00000003c0)="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", &(0x7f00000013c0)="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", 0x1000, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:34 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:34 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000001c0)=0x1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000200)={0x7, 0xc, 0x4, 0x2, 0x5, {}, {0x2, 0x0, 0x0, 0x9d, 0xdb, 0x0, "7ef4c1bf"}, 0x9, 0x2, @userptr=0xffff, 0x6, 0x0, r4}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x4, 0x6, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x8106, 0x4}]}, 0xc, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:34 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:35 executing program 1: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:35 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:35 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000040)}, {&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000080)=""/52, 0x34}], 0x5) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:35 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) [ 570.947085][T25184] atomic_op 00000000cd8447a3 conn xmit_atomic 00000000cd21f677 22:42:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:35 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) [ 571.103806][T25244] validate_nla: 4 callbacks suppressed [ 571.103817][T25244] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:35 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:35 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0xfffffff, 0x7f, 0x2, r0, 0x0, &(0x7f0000000000)={0x990001, 0x7, [], @value64=0x1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:35 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) [ 571.337463][T25327] atomic_op 0000000035b9f813 conn xmit_atomic 00000000cd21f677 22:42:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:35 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6000, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) setxattr$system_posix_acl(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}], {0x4, 0x4}, [{0x8, 0x0, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r6 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r6) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000000)={0x7, 0x7, 0x40, 0x3ff, 0x8, 0x8}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 571.577687][T25448] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:36 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/43, 0x2b) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:36 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6000, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r5 = getegid() chown(&(0x7f0000000140)='./file0\x00', r4, r5) setxattr$system_posix_acl(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}], {0x4, 0x4}, [{0x8, 0x0, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r5}], {0x10, 0x4}, {0x20, 0x5}}, 0x44, 0x1) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r6 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r6) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000000)={0x7, 0x7, 0x40, 0x3ff, 0x8, 0x8}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 571.949135][T25583] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 571.958569][T25582] atomic_op 000000005afd6c0a conn xmit_atomic 00000000cd21f677 22:42:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 572.165013][T25655] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 22:42:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000, 0x0) [ 572.343140][T25715] atomic_op 00000000eb1b49bc conn xmit_atomic 00000000cd21f677 22:42:36 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xb93437f1f772b320, 0x0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) [ 572.383991][T25725] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:37 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{}, 0xffff, 0x3, 0x6}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:37 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:37 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xb93437f1f772b320, 0x0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) [ 572.670989][T25848] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:37 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:37 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xb93437f1f772b320, 0x0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) 22:42:37 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) epoll_create1(0x0) r2 = socket(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}) 22:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 573.030143][T25986] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:37 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 22:42:37 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xb93437f1f772b320, 0x0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1}) 22:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:37 executing program 5: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) [ 573.412453][T26121] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:38 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0xfffffffffffffffd, 0x301000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/114) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:38 executing program 0: mkdir(0x0, 0x40) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:38 executing program 5: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 573.635944][T26134] atomic_op 00000000ae879179 conn xmit_atomic 00000000cd21f677 22:42:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:38 executing program 5: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) [ 573.808754][T26254] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:38 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:38 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:38 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:38 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) [ 574.245205][T26384] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:38 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:39 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:39 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 574.612980][T26521] atomic_op 00000000f6cc71f9 conn xmit_atomic 00000000cd21f677 22:42:39 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:39 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000000)=@hat={'changehat ', 0xffffffffffffffff, 0x5e, ['vmnet1\x00', '\'\x00', ':selfselinuxwlan1GPL@ppp1]\x00', 'ppp1-\x00', '\x00', '-\x00', '\'$,^\x00', '\'{^']}, 0x52) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:39 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 574.935902][T26655] atomic_op 0000000055c3a497 conn xmit_atomic 00000000cd21f677 22:42:39 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:39 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:39 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:39 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socket(0x2, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:39 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:40 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:40 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:40 executing program 2: r0 = syz_open_dev$mouse(0x0, 0xc8f, 0x101000) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x480) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r16, r17, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r19 = getegid() chown(&(0x7f0000000140)='./file0\x00', r18, r19) newfstatat(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r21 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r21, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r22 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r22, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r23 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002580)={0x3, &(0x7f0000002540)=[{0x5, 0x2, 0x1f, 0x7fffffff}, {0x1, 0x49, 0x9, 0xba7}, {0x5, 0x4a, 0x2, 0x917f}]}) r24 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r24, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r25 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r25, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r26 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r27 = syz_open_dev$evdev(&(0x7f0000002600)='/dev/input/event#\x00', 0x55b1, 0x8000) r28 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r28, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002640)={0x8, 0xb, 0x4, 0x10000, 0xfacb, {0x0, 0x2710}, {0x3, 0x1, 0x1f, 0x7f, 0x20, 0x3f, "cf7df15a"}, 0x1, 0x2, @fd=r28, 0x800, 0x0, r0}) r30 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r30, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r31 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r31, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r33 = dup2(r32, r32) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r33, 0xc0205647, &(0x7f0000002700)={0x9b0000, 0x103fc04a, 0x200, r1, 0x0, &(0x7f00000026c0)={0x980900, 0x3}}) r35 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r35, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r36 = getpid() sched_setscheduler(r36, 0x5, &(0x7f0000000380)) r37 = getpid() sched_setscheduler(r37, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r36, r37, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r39 = getegid() chown(&(0x7f0000000140)='./file0\x00', r38, r39) r40 = getegid() r41 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r43 = dup2(r42, r42) ioctl$PERF_EVENT_IOC_ENABLE(r43, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r43, 0x0, 0x10, &(0x7f0000002740)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002840)=0xe8) r45 = getegid() r46 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r45, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r45, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r46, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) r48 = getpid() sched_setscheduler(r48, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r47, r48, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r49, 0x0) stat(&(0x7f0000002880)='./file0/file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000002ac0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="4a5438dbc55228451c9031eefe8d37403a1460913f4b674553c494ee4f7f8872bcbe0b8b258b5ed895f71eb68d18bb4f3aacf8a5e52fe852bffae5661799319047cb05116384ccb9c4501e9aba31b53b82bda3bc19454245867aad7652f6d19f9f9f8ae1c1f5e2d0cd35e7da84a60343d06300bd921586acb5eae69f43ef9db1257e52cd2170", 0x86}, {&(0x7f00000003c0)="3f089ca4f4540796e03bc7391bb74da86a6afc76f4a3327bdfbaef9ad889da4881dd7f625feaa4cd35b2406098373d698177121167771cec44ede27a0fbf1f209a64cc3508cad92e99b59e187614853170eb057dae787022e5a92500ef54c87bbd79e38cd7e800", 0x67}], 0x2, &(0x7f0000002940)=[@rights={{0x24, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r14, r15, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r20}}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r2, r21, r22, 0xffffffffffffffff, r23, r24, r25]}}, @rights={{0x34, 0x1, 0x1, [r1, r26, r27, r29, r30, r31, r34, 0xffffffffffffffff, r35]}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r44, r45}}}, @cred={{0x1c, 0x1, 0x2, {r48, r49, r50}}}], 0x170, 0x40}, 0x4000000) r51 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r51, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r52, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, r52, r53) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:40 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 576.058691][T27066] atomic_op 00000000e89e9757 conn xmit_atomic 00000000cd21f677 22:42:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:40 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000000)=""/87) epoll_create1(0x0) r3 = socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x4}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 22:42:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:40 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x10, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 576.422390][T27067] validate_nla: 5 callbacks suppressed [ 576.422401][T27067] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:41 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:41 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:42 executing program 2: r0 = syz_open_dev$mouse(0x0, 0xc8f, 0x101000) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x480) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r16, r17, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r19 = getegid() chown(&(0x7f0000000140)='./file0\x00', r18, r19) newfstatat(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r21 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r21, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r22 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r22, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r23 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002580)={0x3, &(0x7f0000002540)=[{0x5, 0x2, 0x1f, 0x7fffffff}, {0x1, 0x49, 0x9, 0xba7}, {0x5, 0x4a, 0x2, 0x917f}]}) r24 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r24, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r25 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r25, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r26 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r27 = syz_open_dev$evdev(&(0x7f0000002600)='/dev/input/event#\x00', 0x55b1, 0x8000) r28 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r28, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002640)={0x8, 0xb, 0x4, 0x10000, 0xfacb, {0x0, 0x2710}, {0x3, 0x1, 0x1f, 0x7f, 0x20, 0x3f, "cf7df15a"}, 0x1, 0x2, @fd=r28, 0x800, 0x0, r0}) r30 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r30, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r31 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r31, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r33 = dup2(r32, r32) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r33, 0xc0205647, &(0x7f0000002700)={0x9b0000, 0x103fc04a, 0x200, r1, 0x0, &(0x7f00000026c0)={0x980900, 0x3}}) r35 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r35, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r36 = getpid() sched_setscheduler(r36, 0x5, &(0x7f0000000380)) r37 = getpid() sched_setscheduler(r37, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r36, r37, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r39 = getegid() chown(&(0x7f0000000140)='./file0\x00', r38, r39) r40 = getegid() r41 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r43 = dup2(r42, r42) ioctl$PERF_EVENT_IOC_ENABLE(r43, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r43, 0x0, 0x10, &(0x7f0000002740)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002840)=0xe8) r45 = getegid() r46 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r45, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r45, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r46, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) r48 = getpid() sched_setscheduler(r48, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r47, r48, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r49, 0x0) stat(&(0x7f0000002880)='./file0/file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000002ac0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="4a5438dbc55228451c9031eefe8d37403a1460913f4b674553c494ee4f7f8872bcbe0b8b258b5ed895f71eb68d18bb4f3aacf8a5e52fe852bffae5661799319047cb05116384ccb9c4501e9aba31b53b82bda3bc19454245867aad7652f6d19f9f9f8ae1c1f5e2d0cd35e7da84a60343d06300bd921586acb5eae69f43ef9db1257e52cd2170", 0x86}, {&(0x7f00000003c0)="3f089ca4f4540796e03bc7391bb74da86a6afc76f4a3327bdfbaef9ad889da4881dd7f625feaa4cd35b2406098373d698177121167771cec44ede27a0fbf1f209a64cc3508cad92e99b59e187614853170eb057dae787022e5a92500ef54c87bbd79e38cd7e800", 0x67}], 0x2, &(0x7f0000002940)=[@rights={{0x24, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r14, r15, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r20}}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r2, r21, r22, 0xffffffffffffffff, r23, r24, r25]}}, @rights={{0x34, 0x1, 0x1, [r1, r26, r27, r29, r30, r31, r34, 0xffffffffffffffff, r35]}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r44, r45}}}, @cred={{0x1c, 0x1, 0x2, {r48, r49, r50}}}], 0x170, 0x40}, 0x4000000) r51 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r51, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r52, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, r52, r53) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:42 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r1, r2, 0x0], 0x3}, 0x50) prctl$PR_SET_PTRACER(0x59616d61, r2) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) creat(&(0x7f0000000000)='./file0\x00', 0x1) 22:42:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:42 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:42 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 577.637981][T27331] atomic_op 00000000ab1d22aa conn xmit_atomic 00000000cd21f677 [ 577.677163][T27388] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:42 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:42 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) [ 577.991838][T27459] atomic_op 00000000fa74ca69 conn xmit_atomic 00000000cd21f677 22:42:42 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 578.063230][T27464] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0xa0010000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 578.434560][T27583] atomic_op 00000000459b16b7 conn xmit_atomic 00000000cd21f677 22:42:43 executing program 2: r0 = syz_open_dev$mouse(0x0, 0xc8f, 0x101000) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r2) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x480) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r16, r17, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r19 = getegid() chown(&(0x7f0000000140)='./file0\x00', r18, r19) newfstatat(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r21 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r21, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r22 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r22, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r23 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002580)={0x3, &(0x7f0000002540)=[{0x5, 0x2, 0x1f, 0x7fffffff}, {0x1, 0x49, 0x9, 0xba7}, {0x5, 0x4a, 0x2, 0x917f}]}) r24 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r24, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r25 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r25, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r26 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r27 = syz_open_dev$evdev(&(0x7f0000002600)='/dev/input/event#\x00', 0x55b1, 0x8000) r28 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r28, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002640)={0x8, 0xb, 0x4, 0x10000, 0xfacb, {0x0, 0x2710}, {0x3, 0x1, 0x1f, 0x7f, 0x20, 0x3f, "cf7df15a"}, 0x1, 0x2, @fd=r28, 0x800, 0x0, r0}) r30 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r30, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r31 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r31, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r33 = dup2(r32, r32) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r33, 0xc0205647, &(0x7f0000002700)={0x9b0000, 0x103fc04a, 0x200, r1, 0x0, &(0x7f00000026c0)={0x980900, 0x3}}) r35 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r35, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r36 = getpid() sched_setscheduler(r36, 0x5, &(0x7f0000000380)) r37 = getpid() sched_setscheduler(r37, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r36, r37, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r39 = getegid() chown(&(0x7f0000000140)='./file0\x00', r38, r39) r40 = getegid() r41 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r43 = dup2(r42, r42) ioctl$PERF_EVENT_IOC_ENABLE(r43, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r43, 0x0, 0x10, &(0x7f0000002740)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002840)=0xe8) r45 = getegid() r46 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r45, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r45, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r46, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) r48 = getpid() sched_setscheduler(r48, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r47, r48, 0x0], 0x3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r49, 0x0) stat(&(0x7f0000002880)='./file0/file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000002ac0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="4a5438dbc55228451c9031eefe8d37403a1460913f4b674553c494ee4f7f8872bcbe0b8b258b5ed895f71eb68d18bb4f3aacf8a5e52fe852bffae5661799319047cb05116384ccb9c4501e9aba31b53b82bda3bc19454245867aad7652f6d19f9f9f8ae1c1f5e2d0cd35e7da84a60343d06300bd921586acb5eae69f43ef9db1257e52cd2170", 0x86}, {&(0x7f00000003c0)="3f089ca4f4540796e03bc7391bb74da86a6afc76f4a3327bdfbaef9ad889da4881dd7f625feaa4cd35b2406098373d698177121167771cec44ede27a0fbf1f209a64cc3508cad92e99b59e187614853170eb057dae787022e5a92500ef54c87bbd79e38cd7e800", 0x67}], 0x2, &(0x7f0000002940)=[@rights={{0x24, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r14, r15, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r20}}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r2, r21, r22, 0xffffffffffffffff, r23, r24, r25]}}, @rights={{0x34, 0x1, 0x1, [r1, r26, r27, r29, r30, r31, r34, 0xffffffffffffffff, r35]}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r44, r45}}}, @cred={{0x1c, 0x1, 0x2, {r48, r49, r50}}}], 0x170, 0x40}, 0x4000000) r51 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r51, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r52, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, r52, r53) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:43 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8503}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:43 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) [ 579.463168][T27698] atomic_op 00000000896453b1 conn xmit_atomic 00000000cd21f677 [ 579.495521][T27703] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:44 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:44 executing program 1: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r1, 0xba, 0x0) r2 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x0, 0x80000001, 0x6}, 0x8}, 0xa) bind$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') write$P9_RWALK(r3, &(0x7f0000000240)={0x30, 0x6f, 0x0, {0x3, [{}, {}, {}]}}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x56d) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000640)='./file0/file0\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r11, &(0x7f0000000180)='./file0\x00', r10, &(0x7f0000000640)='./file0\x00', 0x0) r12 = open(0x0, 0x0, 0x0) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r13, &(0x7f0000000180)='./file0\x00', r12, &(0x7f0000000640)='./file0/file0\x00', 0x0) 22:42:44 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:44 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 579.840414][T27835] atomic_op 00000000758d1e58 conn xmit_atomic 00000000cd21f677 [ 579.910721][T27842] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:45 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:45 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:45 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:45 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 580.918646][T27956] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:45 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:45 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:45 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:45 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x10, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 581.283734][T28100] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 581.315834][T28099] atomic_op 0000000005b0f553 conn xmit_atomic 00000000cd21f677 22:42:45 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:45 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:45 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 581.640993][T28231] atomic_op 0000000005ac6afe conn xmit_atomic 00000000cd21f677 22:42:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 581.687806][T28241] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:46 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:46 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) 22:42:46 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) 22:42:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 582.046667][T28365] atomic_op 0000000075e2947b conn xmit_atomic 00000000cd21f677 [ 582.088842][T28378] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:46 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setgid(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:46 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) 22:42:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:46 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:47 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) epoll_create1(0x0) [ 582.447984][T28511] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 582.469546][T28510] atomic_op 00000000f5b55d67 conn xmit_atomic 00000000cd21f677 22:42:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:47 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setgid(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:47 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_create1(0x0) 22:42:47 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 582.828542][T28641] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:47 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_create1(0x0) 22:42:47 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) epoll_create1(0x0) 22:42:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 583.173590][T28775] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:47 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:47 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) epoll_create1(0x0) 22:42:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:48 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_create1(0x0) 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 583.581339][T28912] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:48 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:48 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) 22:42:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:48 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 583.955460][T29049] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:48 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) epoll_create1(0x0) 22:42:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:48 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) epoll_create1(0x0) 22:42:48 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 584.326081][T29178] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 584.352064][T29179] atomic_op 000000003aba32bd conn xmit_atomic 00000000cd21f677 22:42:48 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) 22:42:49 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:49 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:49 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) 22:42:49 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 22:42:49 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 584.769235][T29323] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:49 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:49 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:49 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:49 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) 22:42:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:49 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 22:42:49 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:49 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 585.230764][T29456] atomic_op 000000001df7e295 conn xmit_atomic 00000000cd21f677 [ 585.240603][T29463] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:49 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) 22:42:49 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:50 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 22:42:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:50 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 585.645041][T29596] atomic_op 00000000e8f07e0b conn xmit_atomic 00000000cd21f677 22:42:50 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) socket(0x2, 0x0, 0x0) 22:42:50 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:50 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:50 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:50 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x0) 22:42:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180)=0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:50 executing program 5: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:51 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:51 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:51 executing program 5: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:51 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) epoll_create1(0x0) 22:42:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x2, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:51 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:51 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 586.718954][T29985] validate_nla: 3 callbacks suppressed [ 586.718964][T29985] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:51 executing program 5: pipe(&(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:42:51 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:51 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_create1(0x0) 22:42:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x3, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:51 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:51 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 587.143148][T30121] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:51 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_create1(0x0) 22:42:51 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:52 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:52 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) epoll_create1(0x0) 22:42:52 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 22:42:52 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 587.554032][T30250] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:52 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='&(bdev\x00', &(0x7f0000000040)='./file0\x00', r3) socket(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:52 executing program 0: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) 22:42:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x5, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:52 executing program 0: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) 22:42:52 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) [ 587.974338][T30394] atomic_op 0000000070de9afc conn xmit_atomic 00000000cd21f677 [ 587.980079][T30396] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:52 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:52 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x40) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socket(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = getegid() r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000200000000000000040000000000000008000400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="080001", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="78817779", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000000000000002000000000000000"], 0x11, 0x0) setgid(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 22:42:52 executing program 0: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) 22:42:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:52 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) epoll_create1(0x0) 22:42:52 executing program 0 (fault-call:1 fault-nth:0): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:52 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:52 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 588.388940][T30537] atomic_op 00000000cbba6660 conn xmit_atomic 00000000cd21f677 [ 588.408390][T30541] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:53 executing program 5: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:53 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x3) 22:42:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 22:42:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 22:42:53 executing program 5 (fault-call:6 fault-nth:0): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:53 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:53 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4) [ 588.899218][T30675] atomic_op 00000000c0408b3f conn xmit_atomic 00000000cd21f677 [ 588.900619][T30681] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 588.932494][T30680] FAULT_INJECTION: forcing a failure. [ 588.932494][T30680] name failslab, interval 1, probability 0, space 0, times 0 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) [ 588.989409][T30680] CPU: 0 PID: 30680 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 588.998153][T30680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.008222][T30680] Call Trace: [ 589.011545][T30680] dump_stack+0x197/0x210 [ 589.015898][T30680] should_fail.cold+0xa/0x15 [ 589.020516][T30680] ? fault_create_debugfs_attr+0x180/0x180 [ 589.026355][T30680] ? ___might_sleep+0x163/0x2c0 [ 589.032188][T30680] __should_failslab+0x121/0x190 22:42:53 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 589.037161][T30680] should_failslab+0x9/0x14 [ 589.042465][T30680] __kmalloc+0x2e0/0x770 [ 589.046732][T30680] ? af_alg_wait_for_wmem+0x520/0x520 [ 589.052124][T30680] ? lock_sock_nested+0x9a/0x120 [ 589.057077][T30680] ? sock_kmalloc+0xc6/0x120 [ 589.061715][T30680] sock_kmalloc+0xc6/0x120 [ 589.066158][T30680] af_alg_alloc_areq+0x24/0x1e0 [ 589.071034][T30680] aead_recvmsg+0x45d/0x17c0 [ 589.075659][T30680] ? aead_bind+0x170/0x170 [ 589.080182][T30680] ? apparmor_socket_recvmsg+0x2a/0x30 22:42:53 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x300) [ 589.085661][T30680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.092093][T30680] ? security_socket_recvmsg+0x95/0xc0 [ 589.097570][T30680] ? aead_bind+0x170/0x170 [ 589.102014][T30680] sock_recvmsg+0xce/0x110 [ 589.106453][T30680] sock_read_iter+0x2f8/0x420 [ 589.111590][T30680] ? sock_recvmsg+0x110/0x110 [ 589.116310][T30680] ? lock_acquire+0x190/0x410 [ 589.121004][T30680] ? pipe_lock+0x65/0x80 [ 589.125264][T30680] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.131003][T30680] ? iov_iter_pipe+0xfe/0x2b0 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 589.135725][T30680] generic_file_splice_read+0x4af/0x800 [ 589.141291][T30680] ? add_to_pipe+0x3b0/0x3b0 [ 589.145918][T30680] ? security_file_permission+0x8f/0x380 [ 589.151575][T30680] sock_splice_read+0xf6/0x140 [ 589.156361][T30680] ? rw_verify_area+0x126/0x360 [ 589.161230][T30680] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.166969][T30680] ? kernel_sock_shutdown+0x70/0x70 [ 589.172192][T30680] do_splice_to+0x127/0x180 [ 589.176723][T30680] do_splice+0x1309/0x1680 [ 589.181163][T30680] ? ksys_dup3+0x3e0/0x3e0 22:42:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 589.185603][T30680] ? opipe_prep.part.0+0x300/0x300 [ 589.190734][T30680] ? __fget_light+0x1a9/0x230 [ 589.195438][T30680] __x64_sys_splice+0x2c6/0x330 [ 589.200316][T30680] do_syscall_64+0xfa/0x790 [ 589.204846][T30680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.210752][T30680] RIP: 0033:0x45a919 [ 589.214661][T30680] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:42:53 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000) 22:42:53 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 589.234633][T30680] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 589.243158][T30680] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 589.251146][T30680] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 589.259134][T30680] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 589.267124][T30680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 589.275113][T30680] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:54 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x3000000) 22:42:54 executing program 5 (fault-call:6 fault-nth:1): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:54 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x48, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 589.594829][T30919] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:54 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000000) 22:42:54 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 589.735925][T30930] FAULT_INJECTION: forcing a failure. [ 589.735925][T30930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:42:54 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 589.850238][T30930] CPU: 1 PID: 30930 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 589.858962][T30930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.869037][T30930] Call Trace: [ 589.872374][T30930] dump_stack+0x197/0x210 [ 589.876730][T30930] should_fail.cold+0xa/0x15 [ 589.881335][T30930] ? fault_create_debugfs_attr+0x180/0x180 [ 589.887373][T30930] ? ___might_sleep+0x163/0x2c0 [ 589.892240][T30930] should_fail_alloc_page+0x50/0x60 [ 589.897461][T30930] __alloc_pages_nodemask+0x1a1/0x910 [ 589.902850][T30930] ? stack_trace_save+0xac/0xe0 [ 589.907711][T30930] ? __alloc_pages_slowpath+0x2920/0x2920 [ 589.913449][T30930] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 589.913485][T30930] alloc_pages_current+0x107/0x210 [ 589.913500][T30930] ? sock_read_iter+0x2f8/0x420 [ 589.913518][T30930] push_pipe+0x2ae/0x6a0 [ 589.934147][T30930] iov_iter_get_pages+0x6f9/0x11c8 [ 589.939281][T30930] ? csum_and_copy_to_iter+0x15d0/0x15d0 [ 589.944945][T30930] ? __kasan_check_read+0x11/0x20 [ 589.949997][T30930] af_alg_make_sg+0x9d/0x460 [ 589.955040][T30930] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 589.960607][T30930] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 589.966622][T30930] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 589.972450][T30930] ? af_alg_release+0x120/0x120 [ 589.977315][T30930] ? __kmalloc+0x608/0x770 [ 589.981741][T30930] af_alg_get_rsgl+0x1f4/0x6b0 [ 589.986527][T30930] aead_recvmsg+0x4b6/0x17c0 [ 589.991159][T30930] ? aead_bind+0x170/0x170 [ 589.995593][T30930] ? apparmor_socket_recvmsg+0x2a/0x30 [ 590.001083][T30930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.007347][T30930] ? security_socket_recvmsg+0x95/0xc0 [ 590.012829][T30930] ? aead_bind+0x170/0x170 [ 590.017267][T30930] sock_recvmsg+0xce/0x110 [ 590.021703][T30930] sock_read_iter+0x2f8/0x420 [ 590.026402][T30930] ? sock_recvmsg+0x110/0x110 [ 590.031100][T30930] ? lock_acquire+0x190/0x410 [ 590.035790][T30930] ? pipe_lock+0x65/0x80 [ 590.040044][T30930] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.045442][T31047] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 590.045798][T30930] ? iov_iter_pipe+0xfe/0x2b0 [ 590.045822][T30930] generic_file_splice_read+0x4af/0x800 [ 590.045842][T30930] ? add_to_pipe+0x3b0/0x3b0 [ 590.045872][T30930] ? security_file_permission+0x8f/0x380 [ 590.045895][T30930] sock_splice_read+0xf6/0x140 [ 590.079158][T30930] ? rw_verify_area+0x126/0x360 [ 590.084025][T30930] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.089769][T30930] ? kernel_sock_shutdown+0x70/0x70 [ 590.094990][T30930] do_splice_to+0x127/0x180 [ 590.099510][T30930] do_splice+0x1309/0x1680 [ 590.103957][T30930] ? ksys_dup3+0x3e0/0x3e0 [ 590.108380][T30930] ? opipe_prep.part.0+0x300/0x300 [ 590.113506][T30930] ? __fget_light+0x1a9/0x230 [ 590.118203][T30930] __x64_sys_splice+0x2c6/0x330 [ 590.123078][T30930] do_syscall_64+0xfa/0x790 [ 590.127602][T30930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.133535][T30930] RIP: 0033:0x45a919 22:42:54 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x40000000) 22:42:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:54 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x1000000000000) 22:42:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4c, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 590.137445][T30930] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.157246][T30930] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 590.165780][T30930] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 590.165793][T30930] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 590.165801][T30930] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 590.165809][T30930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 22:42:54 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:54 executing program 5 (fault-call:6 fault-nth:2): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 590.165818][T30930] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:54 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:54 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x300000000000000) 22:42:54 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 590.336939][T31092] FAULT_INJECTION: forcing a failure. [ 590.336939][T31092] name failslab, interval 1, probability 0, space 0, times 0 [ 590.371804][T31092] CPU: 0 PID: 31092 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 22:42:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 590.380544][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.390621][T31092] Call Trace: [ 590.393943][T31092] dump_stack+0x197/0x210 [ 590.398298][T31092] should_fail.cold+0xa/0x15 [ 590.402942][T31092] ? fault_create_debugfs_attr+0x180/0x180 [ 590.408775][T31092] ? ___might_sleep+0x163/0x2c0 [ 590.413654][T31092] __should_failslab+0x121/0x190 [ 590.418759][T31092] should_failslab+0x9/0x14 [ 590.423293][T31092] __kmalloc+0x2e0/0x770 [ 590.427570][T31092] ? af_alg_wait_for_wmem+0x520/0x520 22:42:55 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 590.433090][T31092] ? __kasan_check_write+0x14/0x20 [ 590.438221][T31092] ? sock_kmalloc+0xc6/0x120 [ 590.443085][T31092] sock_kmalloc+0xc6/0x120 [ 590.447531][T31092] af_alg_alloc_areq+0x24/0x1e0 [ 590.454053][T31092] aead_recvmsg+0x45d/0x17c0 [ 590.458685][T31092] ? aead_bind+0x170/0x170 [ 590.460114][T31168] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 590.463122][T31092] ? apparmor_socket_recvmsg+0x2a/0x30 [ 590.463143][T31092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x400000000000000) [ 590.463159][T31092] ? security_socket_recvmsg+0x95/0xc0 [ 590.463181][T31092] ? aead_bind+0x170/0x170 [ 590.463199][T31092] sock_recvmsg+0xce/0x110 [ 590.463217][T31092] sock_read_iter+0x2f8/0x420 [ 590.463239][T31092] ? sock_recvmsg+0x110/0x110 [ 590.506875][T31092] ? lock_acquire+0x190/0x410 [ 590.511568][T31092] ? pipe_lock+0x65/0x80 [ 590.515968][T31092] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.521711][T31092] ? iov_iter_pipe+0xfe/0x2b0 [ 590.526418][T31092] generic_file_splice_read+0x4af/0x800 [ 590.532007][T31092] ? add_to_pipe+0x3b0/0x3b0 22:42:55 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000000000000000) [ 590.536988][T31092] ? security_file_permission+0x8f/0x380 [ 590.542659][T31092] sock_splice_read+0xf6/0x140 [ 590.547477][T31092] ? rw_verify_area+0x126/0x360 [ 590.552474][T31092] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.558225][T31092] ? kernel_sock_shutdown+0x70/0x70 [ 590.563444][T31092] do_splice_to+0x127/0x180 [ 590.568050][T31092] do_splice+0x1309/0x1680 [ 590.572485][T31092] ? ksys_dup3+0x3e0/0x3e0 [ 590.577097][T31092] ? opipe_prep.part.0+0x300/0x300 [ 590.582228][T31092] ? __fget_light+0x1a9/0x230 [ 590.587102][T31092] __x64_sys_splice+0x2c6/0x330 [ 590.591997][T31092] do_syscall_64+0xfa/0x790 [ 590.596526][T31092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.602442][T31092] RIP: 0033:0x45a919 [ 590.606489][T31092] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.629522][T31092] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 22:42:55 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:42:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x60, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x37, 0x5, 0x2, {0xa, @sdr={0x38414762, 0xb8}}, 0xffffffff}) [ 590.637974][T31092] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 590.645965][T31092] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 590.653976][T31092] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 590.661961][T31092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 590.669946][T31092] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:55 executing program 5 (fault-call:6 fault-nth:3): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:55 executing program 1: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000100)=0x3) pidfd_send_signal(r0, 0x1b, &(0x7f0000000080)={0x31, 0x3f, 0x9}, 0x0) 22:42:55 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x68, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:55 executing program 1: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) [ 591.058262][T31304] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) setrlimit(0x7, &(0x7f0000000180)={0x1, 0x100}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x4, @empty, 0x7}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, @in={0x2, 0x4e21, @rand_addr=0x2c}, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x6}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x63c, @remote, 0xfffffffe}, @in={0x2, 0x4e22, @multicast1}], 0xd0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, r3, 0x4) [ 591.140682][T31310] FAULT_INJECTION: forcing a failure. [ 591.140682][T31310] name failslab, interval 1, probability 0, space 0, times 0 [ 591.161619][T31310] CPU: 0 PID: 31310 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 591.170344][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.180851][T31310] Call Trace: [ 591.184164][T31310] dump_stack+0x197/0x210 22:42:55 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 591.188517][T31310] should_fail.cold+0xa/0x15 [ 591.193134][T31310] ? fault_create_debugfs_attr+0x180/0x180 [ 591.199051][T31310] ? ___might_sleep+0x163/0x2c0 [ 591.204016][T31310] __should_failslab+0x121/0x190 [ 591.208978][T31310] should_failslab+0x9/0x14 [ 591.213499][T31310] __kmalloc+0x2e0/0x770 [ 591.217773][T31310] ? af_alg_wait_for_wmem+0x520/0x520 [ 591.223330][T31310] ? __kasan_check_write+0x14/0x20 [ 591.228452][T31310] ? sock_kmalloc+0xc6/0x120 [ 591.233066][T31310] sock_kmalloc+0xc6/0x120 [ 591.237502][T31310] af_alg_alloc_areq+0x24/0x1e0 [ 591.242367][T31310] aead_recvmsg+0x45d/0x17c0 [ 591.247004][T31310] ? aead_bind+0x170/0x170 [ 591.251444][T31310] ? apparmor_socket_recvmsg+0x2a/0x30 [ 591.256927][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.264148][T31310] ? security_socket_recvmsg+0x95/0xc0 [ 591.276146][T31310] ? aead_bind+0x170/0x170 [ 591.280619][T31310] sock_recvmsg+0xce/0x110 [ 591.285075][T31310] sock_read_iter+0x2f8/0x420 22:42:55 executing program 1: prlimit64(0x0, 0x7, 0x0, 0x0) epoll_create1(0x0) 22:42:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/133, 0x85}], 0x3}, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000300)=""/109, 0x6d}, &(0x7f0000000380), 0x20}, 0x20) [ 591.289779][T31310] ? sock_recvmsg+0x110/0x110 [ 591.294482][T31310] ? lock_acquire+0x190/0x410 [ 591.299173][T31310] ? pipe_lock+0x65/0x80 [ 591.303439][T31310] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.309173][T31310] ? iov_iter_pipe+0xfe/0x2b0 [ 591.314919][T31310] generic_file_splice_read+0x4af/0x800 [ 591.320490][T31310] ? add_to_pipe+0x3b0/0x3b0 [ 591.325119][T31310] ? security_file_permission+0x8f/0x380 [ 591.330796][T31310] sock_splice_read+0xf6/0x140 [ 591.335610][T31310] ? rw_verify_area+0x126/0x360 [ 591.340480][T31310] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.346218][T31310] ? kernel_sock_shutdown+0x70/0x70 [ 591.351433][T31310] do_splice_to+0x127/0x180 [ 591.355965][T31310] do_splice+0x1309/0x1680 [ 591.360402][T31310] ? ksys_dup3+0x3e0/0x3e0 [ 591.364843][T31310] ? opipe_prep.part.0+0x300/0x300 [ 591.369995][T31310] ? __fget_light+0x1a9/0x230 [ 591.374689][T31310] __x64_sys_splice+0x2c6/0x330 [ 591.379559][T31310] do_syscall_64+0xfa/0x790 [ 591.384094][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:42:55 executing program 0: write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x100000001, 0x8) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 591.389994][T31310] RIP: 0033:0x45a919 [ 591.393902][T31310] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.413632][T31310] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 591.422069][T31310] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 591.430064][T31310] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 591.438819][T31310] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 591.446806][T31310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 591.454815][T31310] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:56 executing program 5 (fault-call:6 fault-nth:4): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:56 executing program 0: r0 = getpid() prlimit64(r0, 0xce771132d6424cf1, &(0x7f0000000100)={0x80}, 0x0) epoll_create1(0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 22:42:56 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:56 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6c, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) getpgid(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) prlimit64(r3, 0x9, &(0x7f0000000180)={0x0, 0xfffffffefffffffc}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000080)) epoll_create1(0x0) [ 591.775815][T31455] FAULT_INJECTION: forcing a failure. [ 591.775815][T31455] name failslab, interval 1, probability 0, space 0, times 0 [ 591.802519][T31455] CPU: 1 PID: 31455 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 591.811253][T31455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.811262][T31455] Call Trace: [ 591.811289][T31455] dump_stack+0x197/0x210 [ 591.811308][T31455] should_fail.cold+0xa/0x15 [ 591.811329][T31455] ? fault_create_debugfs_attr+0x180/0x180 [ 591.839516][T31455] ? ___might_sleep+0x163/0x2c0 [ 591.844411][T31455] __should_failslab+0x121/0x190 [ 591.849370][T31455] should_failslab+0x9/0x14 [ 591.853899][T31455] __kmalloc+0x2e0/0x770 [ 591.858165][T31455] ? af_alg_wait_for_wmem+0x520/0x520 [ 591.863549][T31455] ? __kasan_check_write+0x14/0x20 [ 591.868677][T31455] ? sock_kmalloc+0xc6/0x120 [ 591.873278][T31455] sock_kmalloc+0xc6/0x120 [ 591.873301][T31455] af_alg_alloc_areq+0x24/0x1e0 [ 591.873318][T31455] aead_recvmsg+0x45d/0x17c0 [ 591.873350][T31455] ? aead_bind+0x170/0x170 [ 591.873367][T31455] ? apparmor_socket_recvmsg+0x2a/0x30 [ 591.873389][T31455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.903352][T31455] ? security_socket_recvmsg+0x95/0xc0 [ 591.908865][T31455] ? aead_bind+0x170/0x170 [ 591.913302][T31455] sock_recvmsg+0xce/0x110 [ 591.917741][T31455] sock_read_iter+0x2f8/0x420 [ 591.922443][T31455] ? sock_recvmsg+0x110/0x110 [ 591.927144][T31455] ? lock_acquire+0x190/0x410 [ 591.931863][T31455] ? pipe_lock+0x65/0x80 [ 591.944638][T31455] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.950808][T31455] ? iov_iter_pipe+0xfe/0x2b0 [ 591.955511][T31455] generic_file_splice_read+0x4af/0x800 [ 591.961078][T31455] ? add_to_pipe+0x3b0/0x3b0 [ 591.965702][T31455] ? security_file_permission+0x8f/0x380 [ 591.971355][T31455] sock_splice_read+0xf6/0x140 [ 591.976134][T31455] ? rw_verify_area+0x126/0x360 [ 591.981004][T31455] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.986746][T31455] ? kernel_sock_shutdown+0x70/0x70 [ 591.991968][T31455] do_splice_to+0x127/0x180 [ 591.996492][T31455] do_splice+0x1309/0x1680 [ 592.000927][T31455] ? ksys_dup3+0x3e0/0x3e0 [ 592.005361][T31455] ? opipe_prep.part.0+0x300/0x300 [ 592.010490][T31455] ? __fget_light+0x1a9/0x230 [ 592.011548][T31468] atomic_op 00000000ad88e615 conn xmit_atomic 00000000cd21f677 [ 592.015198][T31455] __x64_sys_splice+0x2c6/0x330 [ 592.015225][T31455] do_syscall_64+0xfa/0x790 [ 592.015248][T31455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.015259][T31455] RIP: 0033:0x45a919 [ 592.015272][T31455] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.015287][T31455] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 22:42:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x74, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 592.031305][T31474] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 592.032436][T31455] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 592.032446][T31455] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 592.032454][T31455] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 592.032463][T31455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 592.032472][T31455] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:56 executing program 5 (fault-call:6 fault-nth:5): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:56 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 592.211286][T31576] FAULT_INJECTION: forcing a failure. [ 592.211286][T31576] name failslab, interval 1, probability 0, space 0, times 0 [ 592.228122][T31576] CPU: 1 PID: 31576 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 592.236856][T31576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.236863][T31576] Call Trace: [ 592.236887][T31576] dump_stack+0x197/0x210 [ 592.236909][T31576] should_fail.cold+0xa/0x15 [ 592.236927][T31576] ? fault_create_debugfs_attr+0x180/0x180 [ 592.236948][T31576] ? ___might_sleep+0x163/0x2c0 [ 592.236970][T31576] __should_failslab+0x121/0x190 [ 592.236990][T31576] should_failslab+0x9/0x14 [ 592.237002][T31576] __kmalloc+0x2e0/0x770 [ 592.237027][T31576] ? af_alg_wait_for_wmem+0x520/0x520 [ 592.237041][T31576] ? __kasan_check_write+0x14/0x20 [ 592.237057][T31576] ? sock_kmalloc+0xc6/0x120 [ 592.237076][T31576] sock_kmalloc+0xc6/0x120 [ 592.237097][T31576] af_alg_alloc_areq+0x24/0x1e0 [ 592.237116][T31576] aead_recvmsg+0x45d/0x17c0 [ 592.237153][T31576] ? aead_bind+0x170/0x170 [ 592.237175][T31576] ? apparmor_socket_recvmsg+0x2a/0x30 [ 592.323206][T31576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.323226][T31576] ? security_socket_recvmsg+0x95/0xc0 [ 592.323244][T31576] ? aead_bind+0x170/0x170 [ 592.323263][T31576] sock_recvmsg+0xce/0x110 [ 592.323281][T31576] sock_read_iter+0x2f8/0x420 [ 592.323301][T31576] ? sock_recvmsg+0x110/0x110 [ 592.343984][T31576] ? lock_acquire+0x190/0x410 [ 592.344007][T31576] ? pipe_lock+0x65/0x80 [ 592.344025][T31576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.344038][T31576] ? iov_iter_pipe+0xfe/0x2b0 [ 592.344060][T31576] generic_file_splice_read+0x4af/0x800 [ 592.353586][T31576] ? add_to_pipe+0x3b0/0x3b0 [ 592.353622][T31576] ? security_file_permission+0x8f/0x380 [ 592.353643][T31576] sock_splice_read+0xf6/0x140 [ 592.353657][T31576] ? rw_verify_area+0x126/0x360 [ 592.353672][T31576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.353692][T31576] ? kernel_sock_shutdown+0x70/0x70 22:42:56 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 592.410754][T31576] do_splice_to+0x127/0x180 [ 592.415340][T31576] do_splice+0x1309/0x1680 [ 592.419785][T31576] ? ksys_dup3+0x3e0/0x3e0 [ 592.424227][T31576] ? opipe_prep.part.0+0x300/0x300 [ 592.429358][T31576] ? __fget_light+0x1a9/0x230 [ 592.434543][T31576] __x64_sys_splice+0x2c6/0x330 [ 592.439424][T31576] do_syscall_64+0xfa/0x790 [ 592.443977][T31576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.449879][T31576] RIP: 0033:0x45a919 [ 592.453817][T31576] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.473427][T31576] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 592.481941][T31576] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 592.489931][T31576] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 592.497892][T31576] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 22:42:57 executing program 5 (fault-call:6 fault-nth:6): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 592.505849][T31576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 592.513819][T31576] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 [ 592.574020][T31639] FAULT_INJECTION: forcing a failure. [ 592.574020][T31639] name failslab, interval 1, probability 0, space 0, times 0 [ 592.586837][T31639] CPU: 1 PID: 31639 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 592.595538][T31639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.605737][T31639] Call Trace: [ 592.609141][T31639] dump_stack+0x197/0x210 [ 592.613508][T31639] should_fail.cold+0xa/0x15 [ 592.618130][T31639] ? fault_create_debugfs_attr+0x180/0x180 22:42:57 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 592.623978][T31639] ? ___might_sleep+0x163/0x2c0 [ 592.628859][T31639] __should_failslab+0x121/0x190 [ 592.633823][T31639] should_failslab+0x9/0x14 [ 592.638346][T31639] __kmalloc+0x2e0/0x770 [ 592.642647][T31639] ? af_alg_wait_for_wmem+0x520/0x520 [ 592.648048][T31639] ? __kasan_check_write+0x14/0x20 [ 592.653185][T31639] ? sock_kmalloc+0xc6/0x120 [ 592.657796][T31639] sock_kmalloc+0xc6/0x120 [ 592.662233][T31639] af_alg_alloc_areq+0x24/0x1e0 [ 592.667107][T31639] aead_recvmsg+0x45d/0x17c0 [ 592.671724][T31639] ? aead_bind+0x170/0x170 [ 592.676337][T31639] ? apparmor_socket_recvmsg+0x2a/0x30 [ 592.681814][T31639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.688074][T31639] ? security_socket_recvmsg+0x95/0xc0 [ 592.693551][T31639] ? aead_bind+0x170/0x170 [ 592.697984][T31639] sock_recvmsg+0xce/0x110 [ 592.702423][T31639] sock_read_iter+0x2f8/0x420 [ 592.707290][T31639] ? sock_recvmsg+0x110/0x110 [ 592.712003][T31639] ? lock_acquire+0x190/0x410 [ 592.716693][T31639] ? pipe_lock+0x65/0x80 [ 592.720960][T31639] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.726711][T31639] ? iov_iter_pipe+0xfe/0x2b0 [ 592.731409][T31639] generic_file_splice_read+0x4af/0x800 [ 592.737234][T31639] ? add_to_pipe+0x3b0/0x3b0 [ 592.741838][T31639] ? security_file_permission+0x8f/0x380 [ 592.747461][T31639] sock_splice_read+0xf6/0x140 [ 592.752228][T31639] ? rw_verify_area+0x126/0x360 [ 592.757079][T31639] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.762803][T31639] ? kernel_sock_shutdown+0x70/0x70 [ 592.768004][T31639] do_splice_to+0x127/0x180 [ 592.772526][T31639] do_splice+0x1309/0x1680 [ 592.776971][T31639] ? ksys_dup3+0x3e0/0x3e0 [ 592.781406][T31639] ? opipe_prep.part.0+0x300/0x300 [ 592.786703][T31639] ? __fget_light+0x1a9/0x230 [ 592.791385][T31639] __x64_sys_splice+0x2c6/0x330 [ 592.797114][T31639] do_syscall_64+0xfa/0x790 [ 592.802217][T31639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.808106][T31639] RIP: 0033:0x45a919 [ 592.812011][T31639] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.832562][T31639] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 592.841030][T31639] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 592.849012][T31639] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 592.856973][T31639] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 592.865040][T31639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 592.873019][T31639] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:57 executing program 5 (fault-call:6 fault-nth:7): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:42:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7a, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:57 executing program 1 (fault-call:1 fault-nth:0): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 592.956327][T31708] atomic_op 0000000044ac4c90 conn xmit_atomic 00000000cd21f677 22:42:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:57 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 593.036341][T31713] FAULT_INJECTION: forcing a failure. [ 593.036341][T31713] name failslab, interval 1, probability 0, space 0, times 0 [ 593.112389][T31713] CPU: 1 PID: 31713 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 593.121112][T31713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.131178][T31713] Call Trace: [ 593.134519][T31713] dump_stack+0x197/0x210 [ 593.138890][T31713] should_fail.cold+0xa/0x15 [ 593.143501][T31713] ? fault_create_debugfs_attr+0x180/0x180 [ 593.148535][T31821] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 593.149319][T31713] ? ___might_sleep+0x163/0x2c0 [ 593.149343][T31713] __should_failslab+0x121/0x190 [ 593.149365][T31713] should_failslab+0x9/0x14 [ 593.171700][T31713] __kmalloc+0x2e0/0x770 [ 593.176752][T31713] ? af_alg_wait_for_wmem+0x520/0x520 [ 593.182129][T31713] ? __kasan_check_write+0x14/0x20 [ 593.187307][T31713] ? sock_kmalloc+0xc6/0x120 [ 593.192050][T31713] sock_kmalloc+0xc6/0x120 [ 593.196485][T31713] af_alg_alloc_areq+0x24/0x1e0 [ 593.201352][T31713] aead_recvmsg+0x45d/0x17c0 [ 593.205974][T31713] ? aead_bind+0x170/0x170 [ 593.210405][T31713] ? apparmor_socket_recvmsg+0x2a/0x30 [ 593.215881][T31713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.222145][T31713] ? security_socket_recvmsg+0x95/0xc0 [ 593.228127][T31713] ? aead_bind+0x170/0x170 [ 593.232565][T31713] sock_recvmsg+0xce/0x110 [ 593.237001][T31713] sock_read_iter+0x2f8/0x420 [ 593.241697][T31713] ? sock_recvmsg+0x110/0x110 [ 593.246390][T31713] ? lock_acquire+0x190/0x410 [ 593.251075][T31713] ? pipe_lock+0x65/0x80 [ 593.255331][T31713] ? __sanitizer_cov_trace_cmp4+0x16/0x20 22:42:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x300, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:57 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 593.261064][T31713] ? iov_iter_pipe+0xfe/0x2b0 [ 593.265758][T31713] generic_file_splice_read+0x4af/0x800 [ 593.271319][T31713] ? add_to_pipe+0x3b0/0x3b0 [ 593.276453][T31713] ? security_file_permission+0x8f/0x380 [ 593.282106][T31713] sock_splice_read+0xf6/0x140 [ 593.286888][T31713] ? rw_verify_area+0x126/0x360 [ 593.291765][T31713] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 593.297503][T31713] ? kernel_sock_shutdown+0x70/0x70 [ 593.302723][T31713] do_splice_to+0x127/0x180 [ 593.307240][T31713] do_splice+0x1309/0x1680 22:42:57 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x3) 22:42:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$TCXONC(r1, 0x540a, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="1f1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000540)={r6, 0xff}, &(0x7f0000000580)=0x8) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0xa10000, 0xfffffffa, 0x23c7589d, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9b0902, 0x4, [], @string=&(0x7f0000000480)=0x2}}) ioctl$TCSBRKP(r7, 0x5425, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r9, 0xc1004111, &(0x7f00000005c0)={0x1, [0xfff, 0x8, 0x300], [{0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x6d1f, 0xfffffffa, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x2}, {0x2, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x0, 0x1}, {0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}], 0x8}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f0000000040)={0xfffff800, 0xb, 0x4, 0x1000000, 0x7ff, {0x0, 0x7530}, {0x1, 0x0, 0x0, 0x80, 0x7, 0x8, "2a6a3592"}, 0x81, 0x4, @offset=0x400, 0x0, 0x0, r12}) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r14, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000006c0)={0x1, 0x6, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x6, 0xf7, 0xd7, "0df38a4a"}, 0x20, 0x1, @fd=r14, 0x8, 0x0, r15}) recvmsg$can_j1939(r13, &(0x7f0000000440)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/129, 0x81}], 0x3, &(0x7f0000000400)=""/8, 0x8}, 0x2) epoll_create1(0x0) [ 593.311678][T31713] ? ksys_dup3+0x3e0/0x3e0 [ 593.316116][T31713] ? opipe_prep.part.0+0x300/0x300 [ 593.321243][T31713] ? __fget_light+0x1a9/0x230 [ 593.325938][T31713] __x64_sys_splice+0x2c6/0x330 [ 593.330812][T31713] do_syscall_64+0xfa/0x790 [ 593.335331][T31713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.341224][T31713] RIP: 0033:0x45a919 [ 593.345387][T31713] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.365001][T31713] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 593.373691][T31713] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 593.381677][T31713] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 593.389662][T31713] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 593.397647][T31713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 593.405631][T31713] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4) 22:42:58 executing program 5 (fault-call:6 fault-nth:8): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 593.549747][T31944] FAULT_INJECTION: forcing a failure. [ 593.549747][T31944] name failslab, interval 1, probability 0, space 0, times 0 [ 593.596005][T31944] CPU: 0 PID: 31944 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 593.604750][T31944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.614845][T31944] Call Trace: [ 593.618435][T31944] dump_stack+0x197/0x210 [ 593.622803][T31944] should_fail.cold+0xa/0x15 [ 593.627455][T31944] ? fault_create_debugfs_attr+0x180/0x180 [ 593.633281][T31944] ? ___might_sleep+0x163/0x2c0 [ 593.638158][T31944] __should_failslab+0x121/0x190 22:42:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x500, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 593.644077][T31944] should_failslab+0x9/0x14 [ 593.648602][T31944] __kmalloc+0x2e0/0x770 [ 593.652859][T31944] ? af_alg_wait_for_wmem+0x520/0x520 [ 593.658255][T31944] ? __kasan_check_write+0x14/0x20 [ 593.663398][T31944] ? sock_kmalloc+0xc6/0x120 [ 593.668007][T31944] sock_kmalloc+0xc6/0x120 [ 593.672445][T31944] af_alg_alloc_areq+0x24/0x1e0 [ 593.677324][T31944] aead_recvmsg+0x45d/0x17c0 [ 593.682635][T31944] ? aead_bind+0x170/0x170 [ 593.682653][T31944] ? apparmor_socket_recvmsg+0x2a/0x30 [ 593.682671][T31944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.682686][T31944] ? security_socket_recvmsg+0x95/0xc0 [ 593.682702][T31944] ? aead_bind+0x170/0x170 [ 593.682720][T31944] sock_recvmsg+0xce/0x110 [ 593.682740][T31944] sock_read_iter+0x2f8/0x420 [ 593.682757][T31944] ? sock_recvmsg+0x110/0x110 [ 593.682778][T31944] ? lock_acquire+0x190/0x410 [ 593.692634][T31944] ? pipe_lock+0x65/0x80 [ 593.692654][T31944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 593.692668][T31944] ? iov_iter_pipe+0xfe/0x2b0 [ 593.692688][T31944] generic_file_splice_read+0x4af/0x800 [ 593.692705][T31944] ? add_to_pipe+0x3b0/0x3b0 [ 593.692736][T31944] ? security_file_permission+0x8f/0x380 [ 593.754340][T31950] atomic_op 000000009775398c conn xmit_atomic 00000000cd21f677 [ 593.758331][T31944] sock_splice_read+0xf6/0x140 [ 593.758350][T31944] ? rw_verify_area+0x126/0x360 [ 593.758364][T31944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 593.758384][T31944] ? kernel_sock_shutdown+0x70/0x70 [ 593.786877][T31944] do_splice_to+0x127/0x180 [ 593.791418][T31944] do_splice+0x1309/0x1680 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x300) [ 593.795852][T31944] ? ksys_dup3+0x3e0/0x3e0 [ 593.800374][T31944] ? opipe_prep.part.0+0x300/0x300 [ 593.805519][T31944] ? __fget_light+0x1a9/0x230 [ 593.810211][T31944] __x64_sys_splice+0x2c6/0x330 [ 593.815079][T31944] do_syscall_64+0xfa/0x790 [ 593.819614][T31944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.825517][T31944] RIP: 0033:0x45a919 [ 593.829428][T31944] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.849040][T31944] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 593.857457][T31944] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 593.857466][T31944] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 593.857474][T31944] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 593.857482][T31944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 22:42:58 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 593.857491][T31944] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x600, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000) 22:42:58 executing program 5 (fault-call:6 fault-nth:9): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 593.935108][T32055] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:58 executing program 0: prlimit64(0x0, 0xd, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x10000000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x601281, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x8, [0x1, 0x101, 0x6, 0x5833, 0x20, 0x101, 0x8, 0x20]}, 0x14) [ 594.051155][T32067] FAULT_INJECTION: forcing a failure. [ 594.051155][T32067] name failslab, interval 1, probability 0, space 0, times 0 [ 594.152455][T32067] CPU: 1 PID: 32067 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 594.161190][T32067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.171261][T32067] Call Trace: [ 594.174717][T32067] dump_stack+0x197/0x210 [ 594.179074][T32067] should_fail.cold+0xa/0x15 [ 594.183692][T32067] ? fault_create_debugfs_attr+0x180/0x180 [ 594.189520][T32067] ? ___might_sleep+0x163/0x2c0 [ 594.194394][T32067] __should_failslab+0x121/0x190 [ 594.199352][T32067] should_failslab+0x9/0x14 [ 594.203879][T32067] __kmalloc+0x2e0/0x770 [ 594.208144][T32067] ? af_alg_wait_for_wmem+0x520/0x520 [ 594.213528][T32067] ? __kasan_check_write+0x14/0x20 [ 594.218736][T32067] ? sock_kmalloc+0xc6/0x120 [ 594.223344][T32067] sock_kmalloc+0xc6/0x120 [ 594.227779][T32067] af_alg_alloc_areq+0x24/0x1e0 [ 594.232732][T32067] aead_recvmsg+0x45d/0x17c0 [ 594.237387][T32067] ? aead_bind+0x170/0x170 [ 594.242776][T32067] ? apparmor_socket_recvmsg+0x2a/0x30 [ 594.248255][T32067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.254511][T32067] ? security_socket_recvmsg+0x95/0xc0 [ 594.259992][T32067] ? aead_bind+0x170/0x170 [ 594.264424][T32067] sock_recvmsg+0xce/0x110 [ 594.268861][T32067] sock_read_iter+0x2f8/0x420 [ 594.274170][T32067] ? sock_recvmsg+0x110/0x110 [ 594.278867][T32067] ? lock_acquire+0x190/0x410 [ 594.283579][T32067] ? pipe_lock+0x65/0x80 [ 594.287864][T32067] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 594.293606][T32067] ? iov_iter_pipe+0xfe/0x2b0 [ 594.298328][T32067] generic_file_splice_read+0x4af/0x800 [ 594.303896][T32067] ? add_to_pipe+0x3b0/0x3b0 [ 594.309215][T32067] ? security_file_permission+0x8f/0x380 [ 594.314955][T32067] sock_splice_read+0xf6/0x140 [ 594.319732][T32067] ? rw_verify_area+0x126/0x360 [ 594.324604][T32067] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 594.330333][T32067] ? kernel_sock_shutdown+0x70/0x70 [ 594.335544][T32067] do_splice_to+0x127/0x180 [ 594.340071][T32067] do_splice+0x1309/0x1680 [ 594.344507][T32067] ? ksys_dup3+0x3e0/0x3e0 [ 594.348941][T32067] ? opipe_prep.part.0+0x300/0x300 [ 594.354156][T32067] ? __fget_light+0x1a9/0x230 [ 594.358855][T32067] __x64_sys_splice+0x2c6/0x330 [ 594.363989][T32067] do_syscall_64+0xfa/0x790 [ 594.368513][T32067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.374413][T32067] RIP: 0033:0x45a919 [ 594.378318][T32067] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.397936][T32067] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 594.406367][T32067] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 594.414531][T32067] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 594.422518][T32067] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 594.430503][T32067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 594.438505][T32067] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:58 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0xc, &(0x7f0000000000)={0x400000000000000, 0x20000000000}, 0x0) r2 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0x1fffc0000000000}) 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x3000000) 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000000) 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x40000000) 22:42:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x700, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:58 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x1000000000000) [ 594.439116][T32186] atomic_op 00000000669b4d6d conn xmit_atomic 00000000cd21f677 22:42:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:59 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:42:59 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x300000000000000) 22:42:59 executing program 5 (fault-call:6 fault-nth:10): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 594.647452][T32266] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:59 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x400000000000000) [ 594.841111][T32308] FAULT_INJECTION: forcing a failure. [ 594.841111][T32308] name failslab, interval 1, probability 0, space 0, times 0 [ 594.868642][T32308] CPU: 0 PID: 32308 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 594.877385][T32308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.887450][T32308] Call Trace: [ 594.890767][T32308] dump_stack+0x197/0x210 [ 594.895137][T32308] should_fail.cold+0xa/0x15 [ 594.899755][T32308] ? fault_create_debugfs_attr+0x180/0x180 [ 594.905591][T32308] ? ___might_sleep+0x163/0x2c0 [ 594.909482][T32313] atomic_op 000000001ae20813 conn xmit_atomic 00000000cd21f677 [ 594.910460][T32308] __should_failslab+0x121/0x190 [ 594.910479][T32308] should_failslab+0x9/0x14 [ 594.910498][T32308] __kmalloc+0x2e0/0x770 [ 594.931711][T32308] ? af_alg_wait_for_wmem+0x520/0x520 22:42:59 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000040)={0x0, {0x1ff, 0xff}}) epoll_create1(0x0) 22:42:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:42:59 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 594.937093][T32308] ? __kasan_check_write+0x14/0x20 [ 594.942218][T32308] ? sock_kmalloc+0xc6/0x120 [ 594.946824][T32308] sock_kmalloc+0xc6/0x120 [ 594.951267][T32308] af_alg_alloc_areq+0x24/0x1e0 [ 594.956136][T32308] aead_recvmsg+0x45d/0x17c0 [ 594.960764][T32308] ? aead_bind+0x170/0x170 [ 594.965208][T32308] ? apparmor_socket_recvmsg+0x2a/0x30 [ 594.970676][T32308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.976937][T32308] ? security_socket_recvmsg+0x95/0xc0 [ 594.976954][T32308] ? aead_bind+0x170/0x170 [ 594.976972][T32308] sock_recvmsg+0xce/0x110 22:42:59 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x4000000000000000) [ 594.976989][T32308] sock_read_iter+0x2f8/0x420 [ 594.977005][T32308] ? sock_recvmsg+0x110/0x110 [ 594.977027][T32308] ? lock_acquire+0x190/0x410 [ 594.977040][T32308] ? pipe_lock+0x65/0x80 [ 594.977060][T32308] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.015355][T32308] ? iov_iter_pipe+0xfe/0x2b0 [ 595.020057][T32308] generic_file_splice_read+0x4af/0x800 [ 595.025627][T32308] ? add_to_pipe+0x3b0/0x3b0 [ 595.030253][T32308] ? security_file_permission+0x8f/0x380 [ 595.035910][T32308] sock_splice_read+0xf6/0x140 [ 595.040688][T32308] ? rw_verify_area+0x126/0x360 [ 595.045547][T32308] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.045563][T32308] ? kernel_sock_shutdown+0x70/0x70 [ 595.045581][T32308] do_splice_to+0x127/0x180 [ 595.045598][T32308] do_splice+0x1309/0x1680 [ 595.045618][T32308] ? ksys_dup3+0x3e0/0x3e0 [ 595.045636][T32308] ? opipe_prep.part.0+0x300/0x300 [ 595.045652][T32308] ? __fget_light+0x1a9/0x230 [ 595.045669][T32308] __x64_sys_splice+0x2c6/0x330 [ 595.045690][T32308] do_syscall_64+0xfa/0x790 [ 595.045709][T32308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.045720][T32308] RIP: 0033:0x45a919 [ 595.045735][T32308] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.045743][T32308] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 595.045757][T32308] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 22:42:59 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x200, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x1, r3, 0x1}) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x9) 22:42:59 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x8, [0x3, 0xfff7, 0x2f, 0x0, 0x0, 0x3ff, 0x2, 0x40]}, 0x18) [ 595.045765][T32308] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 595.045774][T32308] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 595.045783][T32308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 595.045790][T32308] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:42:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:42:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r1, 0xc, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x0) epoll_create1(0x0) [ 595.202305][T32391] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:42:59 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) epoll_create1(0x0) [ 595.378274][T32437] atomic_op 00000000dea7bce3 conn xmit_atomic 00000000cd21f677 22:43:00 executing program 5 (fault-call:6 fault-nth:11): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:00 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:00 executing program 0: epoll_create1(0x80000) 22:43:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x85030000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:00 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000001c0)={0x0, 0x693, 0x6, [], &(0x7f0000000040)=0x8}) epoll_create1(0x0) 22:43:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 595.591480][T32553] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:00 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xa00000, 0x10000, 0xd65, r0, 0x0, &(0x7f00000000c0)={0x9c0902, 0x80, [], @p_u16=&(0x7f0000000040)=0xf8b}}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000140)={0x8000, 0x1000, 0x6, 0x5, [], [], [], 0x1f, 0x0, 0x3, 0x1, "52fa49712a590ef7c42b3cfc81a94b30"}) [ 595.680531][T32559] FAULT_INJECTION: forcing a failure. [ 595.680531][T32559] name failslab, interval 1, probability 0, space 0, times 0 [ 595.727878][T32559] CPU: 1 PID: 32559 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 595.736610][T32559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.746681][T32559] Call Trace: [ 595.749989][T32559] dump_stack+0x197/0x210 [ 595.754436][T32559] should_fail.cold+0xa/0x15 [ 595.759076][T32559] ? fault_create_debugfs_attr+0x180/0x180 [ 595.765280][T32559] ? ___might_sleep+0x163/0x2c0 [ 595.770156][T32559] __should_failslab+0x121/0x190 [ 595.775560][T32559] should_failslab+0x9/0x14 [ 595.780164][T32559] __kmalloc+0x2e0/0x770 [ 595.784428][T32559] ? af_alg_wait_for_wmem+0x520/0x520 [ 595.789817][T32559] ? __kasan_check_write+0x14/0x20 [ 595.794936][T32559] ? sock_kmalloc+0xc6/0x120 [ 595.799537][T32559] sock_kmalloc+0xc6/0x120 [ 595.803968][T32559] af_alg_alloc_areq+0x24/0x1e0 [ 595.808839][T32559] aead_recvmsg+0x45d/0x17c0 [ 595.813458][T32559] ? aead_bind+0x170/0x170 [ 595.813483][T32559] ? apparmor_socket_recvmsg+0x2a/0x30 [ 595.823361][T32559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.823378][T32559] ? security_socket_recvmsg+0x95/0xc0 [ 595.823397][T32559] ? aead_bind+0x170/0x170 [ 595.823417][T32559] sock_recvmsg+0xce/0x110 [ 595.823435][T32559] sock_read_iter+0x2f8/0x420 [ 595.823463][T32559] ? sock_recvmsg+0x110/0x110 [ 595.853747][T32559] ? lock_acquire+0x190/0x410 [ 595.858471][T32559] ? pipe_lock+0x65/0x80 [ 595.862737][T32559] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.868472][T32559] ? iov_iter_pipe+0xfe/0x2b0 [ 595.873165][T32559] generic_file_splice_read+0x4af/0x800 22:43:00 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x80000) 22:43:00 executing program 0: prlimit64(0x0, 0x8, &(0x7f0000000000), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0)=0x4000000000000200, 0x31e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@rand_addr="fbff931e50a4fcde18d7f572859651c8", 0x78, r4}) epoll_create1(0x0) [ 595.878729][T32559] ? add_to_pipe+0x3b0/0x3b0 [ 595.883355][T32559] ? security_file_permission+0x8f/0x380 [ 595.889039][T32559] sock_splice_read+0xf6/0x140 [ 595.893818][T32559] ? rw_verify_area+0x126/0x360 [ 595.898717][T32559] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 595.904434][T32559] ? kernel_sock_shutdown+0x70/0x70 [ 595.904451][T32559] do_splice_to+0x127/0x180 [ 595.904468][T32559] do_splice+0x1309/0x1680 [ 595.904489][T32559] ? ksys_dup3+0x3e0/0x3e0 [ 595.922997][T32559] ? opipe_prep.part.0+0x300/0x300 [ 595.928157][T32559] ? __fget_light+0x1a9/0x230 [ 595.932881][T32559] __x64_sys_splice+0x2c6/0x330 [ 595.937780][T32559] do_syscall_64+0xfa/0x790 [ 595.942307][T32559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.948207][T32559] RIP: 0033:0x45a919 [ 595.952112][T32559] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.972241][T32559] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 595.980650][T32559] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 595.988628][T32559] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 595.996598][T32559] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 596.004558][T32559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 596.012601][T32559] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 [ 596.021099][ C1] net_ratelimit: 6 callbacks suppressed 22:43:00 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x9462100c622662f6) 22:43:00 executing program 5 (fault-call:6 fault-nth:12): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 596.021107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 596.032546][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:43:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:00 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x77) prlimit64(r1, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 596.195055][T32682] FAULT_INJECTION: forcing a failure. [ 596.195055][T32682] name failslab, interval 1, probability 0, space 0, times 0 [ 596.281938][T32690] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 596.290258][T32682] CPU: 1 PID: 32682 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 596.298964][T32682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.309148][T32682] Call Trace: [ 596.312476][T32682] dump_stack+0x197/0x210 [ 596.316839][T32682] should_fail.cold+0xa/0x15 [ 596.321464][T32682] ? fault_create_debugfs_attr+0x180/0x180 [ 596.327304][T32682] ? ___might_sleep+0x163/0x2c0 [ 596.332876][T32682] __should_failslab+0x121/0x190 [ 596.337833][T32682] should_failslab+0x9/0x14 [ 596.342341][T32682] __kmalloc+0x2e0/0x770 [ 596.342363][T32682] ? af_alg_wait_for_wmem+0x520/0x520 [ 596.342376][T32682] ? __kasan_check_write+0x14/0x20 [ 596.342395][T32682] ? sock_kmalloc+0xc6/0x120 [ 596.351997][T32682] sock_kmalloc+0xc6/0x120 [ 596.352020][T32682] af_alg_alloc_areq+0x24/0x1e0 [ 596.352040][T32682] aead_recvmsg+0x45d/0x17c0 [ 596.376684][T32682] ? aead_bind+0x170/0x170 22:43:00 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4800, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:00 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001480)) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f00000001c0)=0xc) io_setup(0x8, &(0x7f0000000280)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 22:43:00 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x4, 0x3, 0x13, 0x8, 0x60, "ba399280c4c4dc0041b47e812d5f386368d72b9e12fbd3c110b794df8d02526923a74882cd102cd64f0f18eb47bf798c3d877a2c8b0884d918a2d3369ad4a67f61e3b0d730687f40d7a15da0475736449abd654a98940354139d6c0d322ec738"}, 0x6a, 0x0) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xab2b, &(0x7f00000001c0)={0x7}, 0x8) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x1, 0x6, 0x4}}) [ 596.381118][T32682] ? apparmor_socket_recvmsg+0x2a/0x30 [ 596.386661][T32682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.393030][T32682] ? security_socket_recvmsg+0x95/0xc0 [ 596.398515][T32682] ? aead_bind+0x170/0x170 [ 596.402954][T32682] sock_recvmsg+0xce/0x110 [ 596.407431][T32682] sock_read_iter+0x2f8/0x420 [ 596.412123][T32682] ? sock_recvmsg+0x110/0x110 [ 596.416815][T32682] ? lock_acquire+0x190/0x410 [ 596.421503][T32682] ? pipe_lock+0x65/0x80 [ 596.425767][T32682] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.431590][T32682] ? iov_iter_pipe+0xfe/0x2b0 [ 596.436285][T32682] generic_file_splice_read+0x4af/0x800 [ 596.441859][T32682] ? add_to_pipe+0x3b0/0x3b0 [ 596.446480][T32682] ? security_file_permission+0x8f/0x380 [ 596.446501][T32682] sock_splice_read+0xf6/0x140 [ 596.446514][T32682] ? rw_verify_area+0x126/0x360 [ 596.446535][T32682] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.467478][T32682] ? kernel_sock_shutdown+0x70/0x70 [ 596.472713][T32682] do_splice_to+0x127/0x180 [ 596.477288][T32682] do_splice+0x1309/0x1680 22:43:01 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r0, 0xb, &(0x7f0000000000)={0x5, 0x85}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) read$usbmon(r2, &(0x7f00000000c0)=""/252, 0xfc) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7fff, 0x303002) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080)=0xf75) epoll_create1(0x0) [ 596.481747][T32682] ? ksys_dup3+0x3e0/0x3e0 [ 596.486199][T32682] ? opipe_prep.part.0+0x300/0x300 [ 596.491337][T32682] ? __fget_light+0x1a9/0x230 [ 596.496048][T32682] __x64_sys_splice+0x2c6/0x330 [ 596.500941][T32682] do_syscall_64+0xfa/0x790 [ 596.505475][T32682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.511559][T32682] RIP: 0033:0x45a919 [ 596.515479][T32682] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.535202][T32682] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 596.543640][T32682] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 596.551638][T32682] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 596.551649][T32682] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 596.551664][T32682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 596.551681][T32682] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:01 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'syz_tun\x00', {0x3}, 0x2}) epoll_create1(0x0) 22:43:01 executing program 5 (fault-call:6 fault-nth:13): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:01 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:01 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) 22:43:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 596.813709][ T349] FAULT_INJECTION: forcing a failure. [ 596.813709][ T349] name failslab, interval 1, probability 0, space 0, times 0 [ 596.844980][ T349] CPU: 1 PID: 349 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 596.853740][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.863797][ T349] Call Trace: [ 596.863821][ T349] dump_stack+0x197/0x210 [ 596.863842][ T349] should_fail.cold+0xa/0x15 [ 596.863864][ T349] ? fault_create_debugfs_attr+0x180/0x180 [ 596.881845][ T349] ? ___might_sleep+0x163/0x2c0 [ 596.886713][ T349] __should_failslab+0x121/0x190 [ 596.891676][ T349] should_failslab+0x9/0x14 [ 596.896193][ T349] __kmalloc+0x2e0/0x770 [ 596.900453][ T349] ? af_alg_wait_for_wmem+0x520/0x520 [ 596.905843][ T349] ? __kasan_check_write+0x14/0x20 [ 596.910971][ T349] ? sock_kmalloc+0xc6/0x120 [ 596.915579][ T349] sock_kmalloc+0xc6/0x120 [ 596.920002][ T349] af_alg_alloc_areq+0x24/0x1e0 [ 596.920018][ T349] aead_recvmsg+0x45d/0x17c0 [ 596.920048][ T349] ? aead_bind+0x170/0x170 [ 596.934174][ T349] ? apparmor_socket_recvmsg+0x2a/0x30 [ 596.939736][ T349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.946017][ T349] ? security_socket_recvmsg+0x95/0xc0 [ 596.951489][ T349] ? aead_bind+0x170/0x170 [ 596.955923][ T349] sock_recvmsg+0xce/0x110 [ 596.960368][ T349] sock_read_iter+0x2f8/0x420 [ 596.960391][ T349] ? sock_recvmsg+0x110/0x110 [ 596.967767][ T362] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 596.969831][ T349] ? lock_acquire+0x190/0x410 [ 596.969847][ T349] ? pipe_lock+0x65/0x80 [ 596.969870][ T349] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.986851][ T349] ? iov_iter_pipe+0xfe/0x2b0 [ 596.986874][ T349] generic_file_splice_read+0x4af/0x800 [ 596.986900][ T349] ? add_to_pipe+0x3b0/0x3b0 [ 597.014830][ T349] ? security_file_permission+0x8f/0x380 [ 597.014852][ T349] sock_splice_read+0xf6/0x140 [ 597.014868][ T349] ? rw_verify_area+0x126/0x360 [ 597.014885][ T349] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 597.014905][ T349] ? kernel_sock_shutdown+0x70/0x70 [ 597.035852][ T349] do_splice_to+0x127/0x180 [ 597.035871][ T349] do_splice+0x1309/0x1680 [ 597.035893][ T349] ? ksys_dup3+0x3e0/0x3e0 [ 597.035914][ T349] ? opipe_prep.part.0+0x300/0x300 [ 597.035931][ T349] ? __fget_light+0x1a9/0x230 [ 597.035950][ T349] __x64_sys_splice+0x2c6/0x330 [ 597.035973][ T349] do_syscall_64+0xfa/0x790 [ 597.035996][ T349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.079507][ T349] RIP: 0033:0x45a919 [ 597.083417][ T349] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.103055][ T349] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 22:43:01 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 597.111502][ T349] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 597.119489][ T349] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 597.127466][ T349] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 597.135425][ T349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 597.143501][ T349] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x635}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x2}, 0x0) epoll_create1(0x0) 22:43:01 executing program 5 (fault-call:6 fault-nth:14): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:01 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 597.340237][ T481] FAULT_INJECTION: forcing a failure. [ 597.340237][ T481] name failslab, interval 1, probability 0, space 0, times 0 [ 597.421632][ T487] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 597.430148][ T481] CPU: 0 PID: 481 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 [ 597.438752][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.448811][ T481] Call Trace: [ 597.452122][ T481] dump_stack+0x197/0x210 [ 597.452149][ T481] should_fail.cold+0xa/0x15 [ 597.461415][ T481] ? fault_create_debugfs_attr+0x180/0x180 [ 597.467277][ T481] ? ___might_sleep+0x163/0x2c0 [ 597.472153][ T481] __should_failslab+0x121/0x190 [ 597.477118][ T481] should_failslab+0x9/0x14 [ 597.481637][ T481] __kmalloc+0x2e0/0x770 [ 597.485902][ T481] ? af_alg_wait_for_wmem+0x520/0x520 [ 597.491287][ T481] ? __kasan_check_write+0x14/0x20 [ 597.496415][ T481] ? sock_kmalloc+0xc6/0x120 [ 597.501023][ T481] sock_kmalloc+0xc6/0x120 [ 597.505496][ T481] af_alg_alloc_areq+0x24/0x1e0 [ 597.510369][ T481] aead_recvmsg+0x45d/0x17c0 [ 597.515024][ T481] ? aead_bind+0x170/0x170 [ 597.519456][ T481] ? apparmor_socket_recvmsg+0x2a/0x30 [ 597.524929][ T481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.531189][ T481] ? security_socket_recvmsg+0x95/0xc0 [ 597.537709][ T481] ? aead_bind+0x170/0x170 [ 597.542149][ T481] sock_recvmsg+0xce/0x110 [ 597.547112][ T481] sock_read_iter+0x2f8/0x420 [ 597.551922][ T481] ? sock_recvmsg+0x110/0x110 [ 597.556746][ T481] ? lock_acquire+0x190/0x410 [ 597.562240][ T481] ? pipe_lock+0x65/0x80 [ 597.566510][ T481] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 597.572247][ T481] ? iov_iter_pipe+0xfe/0x2b0 [ 597.576946][ T481] generic_file_splice_read+0x4af/0x800 [ 597.582687][ T481] ? add_to_pipe+0x3b0/0x3b0 [ 597.587344][ T481] ? security_file_permission+0x8f/0x380 [ 597.592999][ T481] sock_splice_read+0xf6/0x140 [ 597.597781][ T481] ? rw_verify_area+0x126/0x360 [ 597.602655][ T481] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 597.608396][ T481] ? kernel_sock_shutdown+0x70/0x70 [ 597.613638][ T481] do_splice_to+0x127/0x180 [ 597.618172][ T481] do_splice+0x1309/0x1680 [ 597.622620][ T481] ? ksys_dup3+0x3e0/0x3e0 [ 597.627059][ T481] ? opipe_prep.part.0+0x300/0x300 [ 597.632198][ T481] ? __fget_light+0x1a9/0x230 [ 597.636896][ T481] __x64_sys_splice+0x2c6/0x330 [ 597.641779][ T481] do_syscall_64+0xfa/0x790 [ 597.646472][ T481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.652546][ T481] RIP: 0033:0x45a919 22:43:02 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000200)={'nlmon0\x00', 0x20}) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r2, 0xb, &(0x7f0000000000)={0x4, 0xfffffffffffffffd}, 0x0) epoll_create1(0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x468, 0x108, 0x108, 0x108, 0x240, 0x240, 0x398, 0x398, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000240), {[{{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffff, 0xffff00, 0xffffff00, 0x80], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'veth0_to_team\x00', 'vcan0\x00', {0xff}, {}, 0x21, 0x40, 0x4, 0x4e}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x10000, [0xff000000, 0xff000000, 0x43ed911c702cf248, 0xffffff00], 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0xc486, 0x32, 0x101, 0x3, 0x7}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x1, 0x1}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '.>'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "5fbbe10d4d94cfb5675401c2f9134c56d56ce43c11e9a5e7b78b6d15d8e2"}}}, {{@ipv6={@empty, @mcast1, [0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff00], 'tunl0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x4, 0x3, 0x10}, 0x0, 0x120, 0x158, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x3f, 0x4, 0x0, [0xfff7, 0x36, 0x8001, 0xffff, 0x3, 0xa854, 0x599c, 0x6, 0x0, 0x4, 0x3, 0x7fff, 0x101, 0xc000, 0x0, 0x3fe0], 0xd}}, @common=@frag={{0x30, 'frag\x00'}, {[0x720f, 0x8001], 0x3, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfff8, 0x1a, 0x3d}, {0xa5, 0x20, 0x1f}, {0x4, 0x7, 0xa0}, 0x1f, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r3 = open(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x8b28, 0xfffc, 0xf8ae]}, &(0x7f0000000140)=0xa) 22:43:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 597.656452][ T481] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.676068][ T481] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 597.676083][ T481] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 597.676091][ T481] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 597.676098][ T481] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 597.676107][ T481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 597.676115][ T481] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:02 executing program 5 (fault-call:6 fault-nth:15): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 597.866371][ T603] FAULT_INJECTION: forcing a failure. [ 597.866371][ T603] name failslab, interval 1, probability 0, space 0, times 0 [ 597.902304][ T603] CPU: 0 PID: 603 Comm: syz-executor.5 Not tainted 5.5.0-rc3-syzkaller #0 22:43:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6800, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r1, r2, 0x0], 0x3}, 0x50) r3 = getpgid(r2) prlimit64(r3, 0x7, &(0x7f0000000000)={0x0, 0xd800000000000000}, 0x0) epoll_create1(0x0) [ 597.910938][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.921003][ T603] Call Trace: [ 597.924311][ T603] dump_stack+0x197/0x210 [ 597.928658][ T603] should_fail.cold+0xa/0x15 [ 597.933265][ T603] ? fault_create_debugfs_attr+0x180/0x180 [ 597.939105][ T603] ? ___might_sleep+0x163/0x2c0 [ 597.943976][ T603] __should_failslab+0x121/0x190 [ 597.948926][ T603] should_failslab+0x9/0x14 [ 597.953438][ T603] __kmalloc+0x2e0/0x770 [ 597.957695][ T603] ? af_alg_wait_for_wmem+0x520/0x520 22:43:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 597.963075][ T603] ? __kasan_check_write+0x14/0x20 [ 597.968202][ T603] ? sock_kmalloc+0xc6/0x120 [ 597.972806][ T603] sock_kmalloc+0xc6/0x120 [ 597.977233][ T603] af_alg_alloc_areq+0x24/0x1e0 [ 597.982085][ T603] aead_recvmsg+0x45d/0x17c0 [ 597.986703][ T603] ? aead_bind+0x170/0x170 [ 597.991136][ T603] ? apparmor_socket_recvmsg+0x2a/0x30 [ 597.996613][ T603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.002867][ T603] ? security_socket_recvmsg+0x95/0xc0 [ 598.008364][ T603] ? aead_bind+0x170/0x170 [ 598.013750][ T603] sock_recvmsg+0xce/0x110 [ 598.018175][ T603] sock_read_iter+0x2f8/0x420 [ 598.022857][ T603] ? sock_recvmsg+0x110/0x110 [ 598.022879][ T603] ? lock_acquire+0x190/0x410 [ 598.022893][ T603] ? pipe_lock+0x65/0x80 [ 598.022910][ T603] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 598.022924][ T603] ? iov_iter_pipe+0xfe/0x2b0 [ 598.022944][ T603] generic_file_splice_read+0x4af/0x800 [ 598.022959][ T603] ? add_to_pipe+0x3b0/0x3b0 [ 598.022988][ T603] ? security_file_permission+0x8f/0x380 [ 598.069593][ T603] sock_splice_read+0xf6/0x140 [ 598.074378][ T603] ? rw_verify_area+0x126/0x360 [ 598.079245][ T603] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 598.079260][ T603] ? kernel_sock_shutdown+0x70/0x70 [ 598.079280][ T603] do_splice_to+0x127/0x180 [ 598.094686][ T603] do_splice+0x1309/0x1680 [ 598.099131][ T603] ? ksys_dup3+0x3e0/0x3e0 [ 598.103576][ T603] ? opipe_prep.part.0+0x300/0x300 [ 598.108712][ T603] ? __fget_light+0x1a9/0x230 [ 598.113506][ T603] __x64_sys_splice+0x2c6/0x330 [ 598.117326][ T606] atomic_op 0000000005764c7b conn xmit_atomic 00000000cd21f677 [ 598.118383][ T603] do_syscall_64+0xfa/0x790 [ 598.118403][ T603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.118422][ T603] RIP: 0033:0x45a919 [ 598.139668][ T611] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 598.140299][ T603] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.168040][ T603] RSP: 002b:00007feb44a14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 598.168056][ T603] RAX: ffffffffffffffda RBX: 00007feb44a14c90 RCX: 000000000045a919 [ 598.168064][ T603] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 598.168072][ T603] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 598.168080][ T603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb44a156d4 [ 598.168089][ T603] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:02 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:03 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 598.557695][ T726] atomic_op 000000009a92c189 conn xmit_atomic 00000000cd21f677 [ 598.575562][ T729] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:03 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x105000, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) 22:43:03 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:03 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7400, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:03 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6c7, 0x701902db377a9bf4) r1 = open(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42614000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x80000) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000140)) [ 598.973798][ T852] atomic_op 000000004b58a09a conn xmit_atomic 00000000cd21f677 [ 599.012342][ T854] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:03 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:03 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bcsf0\x00', 0x4009}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) close(r2) epoll_create1(0x0) 22:43:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 599.327742][ T971] atomic_op 00000000f01db52c conn xmit_atomic 00000000cd21f677 [ 599.419199][ T990] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:04 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:04 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x1a1802, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000140)) ioprio_get$pid(0xe2a94a8c01c9e6d, r3) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0x4, &(0x7f0000000000)={0x1, 0x1000}, 0x0) epoll_create1(0x0) 22:43:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x1a000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 599.649988][ T1087] Unknown ioctl -2147199790 [ 599.789709][ T1090] atomic_op 0000000094dd684e conn xmit_atomic 00000000cd21f677 [ 599.836144][ T1087] Unknown ioctl -2147199790 22:43:04 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10010, 0x0) 22:43:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:04 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 599.934475][ T1181] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x40000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:04 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x5000, 0x9, 0xfffffff8, 0x40, 0x0, [{0x1, 0x0, 0xff, [], 0x3}, {0x81, 0x40, 0x80, [], 0x2}, {0x0, 0x81, 0x4, [], 0xf8}, {0x99, 0x11, 0x4, [], 0x1f}, {0x81, 0x80, 0x7f, [], 0x19}, {0x3f, 0xff, 0x4, [], 0x1a}, {0x40, 0x1, 0x0, [], 0x4}, {0x40, 0x4, 0xfa, [], 0x8}, {0x8, 0x2, 0x73, [], 0x4}, {0x6, 0x1, 0x1f, [], 0x80}, {0x80, 0x7, 0x3, [], 0x1}, {0x3, 0x2, 0x2, [], 0x95}, {0x3f, 0x85, 0x4, [], 0x40}, {0xff, 0x7, 0x3}, {0x3, 0xbf, 0x58}, {0x1, 0x4, 0x81, [], 0x8}, {0x3, 0x81, 0x9, [], 0xc6}, {0x7, 0x3, 0x31, [], 0x79}, {0x7, 0x0, 0x1f, [], 0x2}, {0x0, 0x9, 0x1f, [], 0x7}, {0x1, 0x40, 0x8, [], 0x73}, {0x5, 0x1f, 0x6, [], 0x5}, {0x79, 0x0, 0x3, [], 0x9}, {0x1, 0x3f, 0x3, [], 0x5}]}}) 22:43:04 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 600.169338][ T1218] atomic_op 000000000ae1eaf7 conn xmit_atomic 00000000cd21f677 22:43:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x100000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 600.352963][ T1327] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000180), {0x10400029}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000004440)=""/4123, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r0, 0x8, &(0x7f0000000040)={0x200000000200000}, 0x0) getpid() epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000080)={0x29, @broadcast, 0x4e21, 0x4, 'sed\x00', 0x10, 0x1, 0x38}, 0x2c) 22:43:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa00100, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:05 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 600.740202][ T1447] atomic_op 0000000078318c4f conn xmit_atomic 00000000cd21f677 [ 600.792286][ T1454] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:05 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x14000, 0x0) 22:43:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:05 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) mkdir(0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 601.198703][ T1573] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:05 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 601.573296][ T1699] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 601.577006][ T1700] atomic_op 00000000e3573ecd conn xmit_atomic 00000000cd21f677 22:43:06 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r2, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x0, 0x0) getsockname$tipc(r3, &(0x7f0000000500)=@id, &(0x7f0000000540)=0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0xd, 0x0, 0x0, 0x20000000000002d6, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x12, 0x18, 0x80, 0x4, 0x86, "8a63d55de4f7429b6e17848c0d712c474e5fb0b490d5d3afd598d34e7250498a5a7e50454cac480d139e83b360f91e4bd97468ee28835411066f7a44a7a7c4018a20915866ded1ba90f774ff728bbc4939cabc49013bf2d23b3173aab80e3485f093e87f627e16e433855b954b3fb64d56e782ff4daa416328faae56881be58fc4936b56f63d"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x3}]}, 0x120}}, 0x8000) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000000c0), 0xffffffffffffffff) epoll_create1(0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000080)) 22:43:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5a, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:06 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 601.796377][ T1811] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 601.925484][ T1817] atomic_op 000000000188ecf2 conn xmit_atomic 00000000cd21f677 22:43:06 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000, 0x0) 22:43:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x35, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:06 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x321381, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x400) epoll_create1(0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 22:43:06 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x5a, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:07 executing program 0: r0 = getpgid(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x80) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x75) renameat(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') prlimit64(r0, 0xa, &(0x7f0000000000), 0x0) epoll_create1(0x80000) [ 602.504060][ T1964] atomic_op 0000000086294f11 conn xmit_atomic 00000000cd21f677 22:43:07 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x3b6, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:07 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'gre0\x00', {0x1}, 0xeb4}) epoll_create1(0x0) 22:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x3, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 603.083337][ T2194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:43:07 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x4000000, 0x0) 22:43:07 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x7, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:08 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) getpgid(r0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x68, r5, 0x5}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400040}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xc27f, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x5cb0569d32ff333b}, 0x4040) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r3, 0x0], 0x3}, 0x50) prlimit64(r2, 0x8, &(0x7f0000000000)={0x0, 0x2000000000000002}, 0x0) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 603.501631][ T2211] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 22:43:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x10, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:08 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 603.834024][ T2320] rds_sendmsg: 1 callbacks suppressed [ 603.834037][ T2320] atomic_op 00000000f26273fc conn xmit_atomic 00000000cd21f677 [ 603.837060][ T2323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:43:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x18, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:08 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 604.145593][ T2435] atomic_op 00000000abf31009 conn xmit_atomic 00000000cd21f677 22:43:08 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000000)={0xfffffffffffffffc}, 0x0) r0 = epoll_create1(0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x9d0000, 0x6, 0x6, r0, 0x0, &(0x7f0000000140)={0x390967, 0x1000, [], @value64=0x8}}) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x799, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)=0x3ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x2}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xc, &(0x7f0000000480)=""/77, &(0x7f0000000500)=0x4d) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x40, &(0x7f0000000080)={0x9, 0x80000001, 0x7}) 22:43:09 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x6000000, 0x0) 22:43:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x25, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:09 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3ecb41a41575003e"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/4096], 0x1008, 0x1, 0x0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/105}, 0x71, 0x3, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/167) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @reserved="bdeeba6bd32efeceeace71ba35764cea97be73e5ce4279bc94ade2f63a2a064e"}}) 22:43:09 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) 22:43:09 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) [ 604.624505][ T2561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 604.662949][ T2562] atomic_op 00000000c0b2db3b conn xmit_atomic 00000000cd21f677 22:43:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x5a, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 604.846050][ T2692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 604.951135][ T2702] atomic_op 00000000d893c2dd conn xmit_atomic 00000000cd21f677 22:43:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0x3d0, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 605.123103][ T2817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:43:09 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x10) 22:43:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x2, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 605.479665][ T2829] atomic_op 0000000039e8c796 conn xmit_atomic 00000000cd21f677 22:43:10 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x4000) 22:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x3, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:10 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000580)={0xfffffff, 0x0, 0x6ec7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x980924, 0x92b, [], @value=0x1}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@ipv4={[], [], @local}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x3}]}, 0x98}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000005c0)={r1, 0x6}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) epoll_create1(0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f00000000c0)={{{0x6, 0x1}}, 0x41, 0x10000, &(0x7f0000000040)="0c8da5cda58ec63795c4f3f88b2759e7bd1098238155fd8b88bac9c75c220067af7a7092edf4bddfdfee5bc98d6930f94d44a272dd0842f6e81cb6851a2015e568"}) 22:43:10 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x5, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:10 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x1000000) [ 605.898976][ T2967] atomic_op 00000000eaab7f63 conn xmit_atomic 00000000cd21f677 22:43:10 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:10 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0xb2b8984ba4791c1f) 22:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x6, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:10 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x10000000) 22:43:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:10 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x30, 0x4, 0x80, 0x0, 0x0, 0x2000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x100000000, 0x6}, 0x20021, 0xffffffff, 0x2, 0x4, 0x3, 0x7, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 22:43:10 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x8, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 606.366502][ T3105] atomic_op 000000005463ff10 conn xmit_atomic 00000000cd21f677 22:43:10 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x40000000) 22:43:10 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8b) 22:43:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x9, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:11 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:11 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3, 0x100080) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x36, 0x8, 0x6, 0x800}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x10, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:11 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x8dffffff) [ 606.717171][ T3233] atomic_op 00000000106e90de conn xmit_atomic 00000000cd21f677 22:43:11 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:11 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x93, "a03e227d7637bcbdbbc0c1ce4177ca269eb77d56d1e404b4eb5c8655a28b1bcaa3355495787b3d7be677d8f11454db2fa082e4d9b93cbbf38eccad678ed6b45123d674d6e9bd7c4d42f1734820041a96fb3ebda307fe7d7de63d6f8c89f50e54ca08bcd2bb89432f8f9a9fbe94bc314623175162f2020f05430390a4934c2bdaa367b6d8f12c05abc4985044de85851eccb137"}, &(0x7f0000000100)=0xb7) 22:43:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x14, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:11 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0xf0ffffff) 22:43:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:11 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x25, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 607.237373][ T3367] atomic_op 00000000bee7cbf4 conn xmit_atomic 00000000cd21f677 22:43:11 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0xffffff8d) 22:43:11 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) io_setup(0x7fff, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r2) fcntl$dupfd(r4, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000080)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000001c0), 0x1e7) r8 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r8, 0x1000008912, &(0x7f0000000000)="0805b5055e0bcfe8474071") close(r6) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x2, "1d869a97120c84f8"}) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r11, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r11, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r9, 0x80045301, &(0x7f0000000180)) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)={0x7, 0x9, 0x6, 0x2, 0x4}) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000080)="8da6aa2e7726b840", 0x8, 0x3, 0x0, 0x0, r4}, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000500)={r14, 0x1, 0x20, 0x7ff, 0xf789}, &(0x7f0000000540)=0x18) 22:43:11 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x5a, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:12 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0xfffffff0) 22:43:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x63, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:12 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xcd8661dbd3de0b58}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004000}, 0xc000) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x610000, 0x4) 22:43:12 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:12 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x100000000000000) [ 607.740253][ T3525] atomic_op 000000008563f54a conn xmit_atomic 00000000cd21f677 22:43:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x300, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:12 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) 22:43:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:12 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x4ca, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:12 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r0, 0x2, &(0x7f0000000040), 0x0) epoll_create1(0x0) 22:43:12 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0xa400, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 608.372120][ T3809] mmap: syz-executor.1 (3809): VmData 18644992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 22:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, '\nretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) 22:43:13 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x1000000000000000) 22:43:13 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000001c00000000"]) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0x5, @pix_mp={0x10000, 0x0, 0x50323234, 0x7, 0xc, [{0x9, 0xfffffbff}, {0x5, 0x8}, {0xa, 0x7e2}, {0x7d68, 0x4}, {0x0, 0x7fffffff}, {0x3, 0x8001}, {0x2, 0x40000000}, {0xfffffff7, 0x1}], 0x40, 0x40, 0x7, 0x1, 0x4}}) 22:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, '%retap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 608.916352][ T3952] rds_sendmsg: 2 callbacks suppressed [ 608.916364][ T3952] atomic_op 00000000929cc370 conn xmit_atomic 00000000cd21f677 22:43:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) r4 = gettid() r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x101000, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000180)={r6, r7, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) 22:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'g\netap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:13 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:13 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xffff7fff, &(0x7f00000000c0)={0x9}, 0x8) 22:43:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa0010000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'g%etap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:13 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 609.321843][ T4085] atomic_op 00000000ae05b08b conn xmit_atomic 00000000cd21f677 22:43:14 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x4000000000000000) 22:43:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gr\ntap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:14 executing program 1: epoll_create1(0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) 22:43:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:14 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gr%tap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 609.835480][ T4216] atomic_op 0000000071c93530 conn xmit_atomic 00000000cd21f677 22:43:14 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x608303, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xe6, &(0x7f00000000c0)=""/207, &(0x7f00000001c0)=0xcf) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x0, 0xe8, 0x72}}, 0xa) 22:43:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:14 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gre\nap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:14 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x11a) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0xfa, 0x1) r3 = open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b4380, 0x12) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x808, 0x0) epoll_create1(0x0) [ 610.240556][ T4341] atomic_op 00000000a788f816 conn xmit_atomic 00000000cd21f677 22:43:14 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:15 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x8dffffff00000000) 22:43:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gre%ap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:15 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:15 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r3, 0x0], 0x3}, 0x50) r4 = getpgrp(r3) prlimit64(r4, 0x7, &(0x7f0000000000)={0x0, 0x7}, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000040)=""/156) 22:43:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) r1 = socket$inet(0x10, 0x3, 0xc) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @local}}}, 0xa0) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r8 = gettid() waitid(0x83b895581628fca4, r8, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRESDEC=r8]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r7}}, 0x38) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r10, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r11, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r11, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0, r9}}, 0xfffffffffffffd76) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:15 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 611.080108][ T4471] bridge0: port 3(gretap0) entered blocking state [ 611.081269][ T4466] atomic_op 0000000097f5973a conn xmit_atomic 00000000cd21f677 [ 611.103938][ T4471] bridge0: port 3(gretap0) entered disabled state [ 611.131749][ T4471] device gretap0 entered promiscuous mode [ 611.149151][ T4471] bridge0: port 3(gretap0) entered blocking state [ 611.155774][ T4471] bridge0: port 3(gretap0) entered forwarding state 22:43:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gret\np\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:15 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, 0x0) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x64eb, 0x9, 0x7f, 0xff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x4, 0x9}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x2}, 0x0) epoll_create1(0x0) 22:43:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:16 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, 0x0) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 611.479229][ T4596] atomic_op 00000000829085ae conn xmit_atomic 00000000cd21f677 22:43:16 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0xf0ffffff00000000) 22:43:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gret%p\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d00001500000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000005000000000000000a0000000000000000000000000000000000ffffac141400000000000000000005000000000000000200"/152], 0xa8}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = socket(0x10, 0x4, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000a2fe080012000000000000000000000000000600000000000000000000800000000000000000000000000000000000000000ac1414aa000000000000000000000000050000000000f410c38f0b4ea031bdf826f56142a600000a0000000000000000000000000000000000ffffac141400000000000000000005000000000000000241286a137aa95c6cf6c252dba8a16aaeb2553335a24dba78b02d6578149edf2897e70d2328150cd7a6e585609ab73d910a991264cdf70707b174fb62a0f662d19fa3879be7e76cd0475cf689236657bc0f2edcd7c054474587bdf898e925d67440103a99589a83e29f3f3f92b3cd9062ae40dcf3be26ad805cd7cfe15ebf1930a1869578453040180ea6a9817bfb5e4047b40e4065abf74d13d0062f65502eb521bd14d7a7"], 0xa8}}, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x1f, 0x5, 0x1}, 0x8) epoll_create1(0x0) 22:43:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:16 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, 0x0) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:16 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = pidfd_open(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="d1", 0x1) epoll_create1(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x30402, 0x0) 22:43:16 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x2, 0x1a, 0xfffb, 0x20, "49b2b6edb0701b9dcdb5c55d93a77d7b3f5d1202daed74bdfa36904e1bcf6f3d"}) epoll_create1(0x0) 22:43:16 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 612.011310][ T4718] atomic_op 000000009f5752e1 conn xmit_atomic 00000000cd21f677 22:43:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'greta\n\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20, 0x0, @mcast2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)={0xfffffffb, 0x5, 0x4, 0x100000, 0x1, {0x77359400}, {0x5, 0x8, 0xff, 0x8, 0x5, 0x7, "b9de4dba"}, 0x3, 0x4, @offset=0x2, 0x0, 0x0, r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r11, 0x7, &(0x7f0000000040)={0x0, 0x7}, 0x0) epoll_create1(0x0) 22:43:16 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x68) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x8000, 0x0) 22:43:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 612.407669][ T4850] atomic_op 00000000454d6858 conn xmit_atomic 00000000cd21f677 [ 612.422830][ T4852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 612.565668][ T4844] batman_adv: batadv0: Adding interface: veth3 [ 612.582523][ T4844] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.612405][ T4844] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 612.657426][ T4852] batman_adv: batadv0: Removing interface: veth3 22:43:17 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0xffffffff00000000) 22:43:17 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'greta%\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:17 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x9}, 0x0) epoll_create1(0x0) 22:43:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 612.879397][ T4967] atomic_op 000000009c6aeb31 conn xmit_atomic 00000000cd21f677 22:43:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x02'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:17 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021100001500000000fa0000000000000100180000003c02080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000005000000000000000a00000000000000000000000000000000000000000005000000000000000200"/152], 0xa8}}, 0x0) r1 = dup(r0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x7f) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x9, 0x0, 0x401, 0x7}, 0x10) 22:43:17 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) io_uring_setup(0xf9, &(0x7f0000000100)) close(0xffffffffffffffff) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x03'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:17 executing program 0: shmget(0x3, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xa, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000016c0)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001700), &(0x7f0000001740)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) dup3(r0, r3, 0x80000) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000080)={0x0, 0x100000000, 0x1, 0x10, &(0x7f0000ffd000/0x3000)=nil, 0x4104280e}) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000000c0)=""/64) r4 = socket$packet(0x11, 0x3, 0x300) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x1001, r6) keyctl$read(0xb, r7, &(0x7f0000005340)=""/4096, 0xd900) r8 = request_key(&(0x7f0000001600)='.request_key_auth\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='syz0\x00', r7) keyctl$search(0xa, 0x0, &(0x7f0000001580)='blacklist\x00', &(0x7f00000015c0)={'syz', 0x2}, r8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r9}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001400020828bd7000fddbdf250a002037", @ANYRES32=r9, @ANYBLOB="081865fc4b1473363bef42ae6b4300ed1c070000"], 0x20}}, 0x0) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r11, r12, 0x0], 0x3}, 0x50) sendfile(r10, r13, &(0x7f0000001400), 0x2) socketpair(0x0, 0x40007, 0x40, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f0000001540)={&(0x7f0000001480)=""/177, 0x4000, 0x800, 0x667ee110, 0x1}, 0x20) sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x130, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x392}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78db}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 613.226913][ T5091] atomic_op 00000000c9e03c0e conn xmit_atomic 00000000cd21f677 22:43:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000040)={0x100, [0x93a5, 0xa4d6, 0x6], [{0x5, 0x3, 0x1}, {0x4, 0xe, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x1}, {0x8, 0xffff}, {0x8c, 0x1b9a, 0x0, 0x0, 0x1}, {0xfffffffe, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x800, 0x2, 0x1, 0x0, 0x0, 0x1}, {0xaca, 0xffff, 0x0, 0x0, 0x1, 0x1}, {0x45e, 0x4, 0x1}, {0x80000000, 0x81, 0x0, 0x1}, {0x1103, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x800, 0xffffffed, 0x0, 0x1, 0x0, 0x1}], 0x7}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000009c0)={{0x1, @name="8dd0a0cec672429fa21a88a92bd561e5ff392b15de9aae63ca6212b9f3d8c7f1"}, 0x8, 0x97, 0x613}) epoll_create1(0x0) delete_module(&(0x7f0000000980)='cpuset\x00', 0x400) 22:43:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7}, 0x0) epoll_create1(0x0) 22:43:18 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x04'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:18 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x8, "2d0733e409467a151b515bcafa3a292ba844d426dddc694a5a03b7a778eef064", 0x19, 0x7fff, 0x9, 0x4, 0x2}) 22:43:18 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/bnep\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x200, 0x0) r5 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000140)={0x200, 0x6aa3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x7fffffff, 0x2, 0x4, 0x4000, 0x101, {}, {0x6, 0x0, 0x1f, 0x5, 0x2, 0x0, "84808679"}, 0x2, 0x1, @offset=0x14d, 0x0, 0x0, r7}) r8 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000001c0)={0xff, 0x3, 0x4, 0x200000, 0x80000001, {0x77359400}, {0x1, 0xc, 0x39, 0x81, 0x9, 0xca, "aedf1963"}, 0x7, 0x1, @fd, 0x8000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) splice(r5, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:18 executing program 1: r0 = gettid() prlimit64(r0, 0xb3afac8696cc3588, &(0x7f0000000000)={0x0, 0x1000000000000006}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) epoll_create1(0x80000) 22:43:18 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018020800000000000000000600000000000000000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000005000000000000000a00000000000000000000000000ffffac14140000000000000000000500001b000000000200"/144], 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x7, 0x5, 0x4, 0xe000, 0x1000, {}, {0x3, 0x901890cca9cb2792, 0x20, 0x1, 0x66, 0x1, "ed86eb53"}, 0x4, 0x2, @offset, 0x9, 0x0, r2}) keyctl$session_to_parent(0x12) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f00000000c0)=""/26) epoll_create1(0x0) 22:43:18 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x05'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:18 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newaddr={0x20, 0x14, 0x802, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x424ebac2bc350337, r2}, [@IFA_FLAGS={0x8, 0x8, 0x71d}]}, 0x20}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r4, r5, 0x0], 0x3}, 0x50) sendfile(r3, r6, &(0x7f0000001400), 0x2) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r7, 0x1201ffa1820c36fa, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="217a8f9c613bdbc35bac75a25524bcf8"}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x559}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xb}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffc47) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) epoll_create1(0x3f02e770857d4024) 22:43:18 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21008000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x0, 0x414, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0xfffffffffffffcef, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x204, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x2}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x2004d801) [ 614.201495][ T5352] rds_sendmsg: 1 callbacks suppressed [ 614.201506][ T5352] atomic_op 00000000828e6130 conn xmit_atomic 00000000cd21f677 22:43:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x06'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:18 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:18 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x22d4, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4000, 0x0) epoll_create1(0x0) 22:43:19 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:19 executing program 5: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000100)=""/69) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) rt_sigpending(&(0x7f00000000c0), 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\a'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:19 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0x0) 22:43:19 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:19 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x400, 0x2c0800) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000000c0)={0x1000, 0x3, 0x9}) 22:43:19 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) sched_yield() epoll_create1(0x80000) [ 615.033083][ T5497] atomic_op 000000003545147d conn xmit_atomic 00000000cd21f677 22:43:19 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) epoll_create1(0x0) 22:43:19 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\n'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000000c0)=@ethernet={0x307, @dev={[], 0x2a}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="33dc8742165fddb46112c4656f59d873ee2e7663d8f4583e162be552995bef2ab53e5363884e151138215093fedd046717527c7e9a4d24ec29d67e655c134813c62148065a6973614a8ff1eee44f02935f2486b88d512193b36ff9fbca3bbce2384c5435d778883e2eb7536b716b850f1ddcfce0c2a73b5f1bda60eccc634a1d3afdf20d670bb6d908acc98a4590667cb2b2c5620ea3b9556de09112dd899c059e6953e117aa4e362ff4d9d240db6e8344fd48", 0xb3}, {&(0x7f0000000200)="60cfe84226dab09e1fedacefab6a6ab48d790fb2ec347f6b2823f5a5fe7958f4847589db31ae3b1855788855550a01ff389fac6a6d7e5c3cdcb32710270c0b01a253ac21fc234fce01cdaf710dee2fc57acad5a1fcb058dc84eba20366e62f1974207a754405", 0x66}, {&(0x7f0000000280)="9461bd11459d0db8bdd535bb5f523ba32f4a6115e5ec0c0914e5faef3c1c0401ab29087c831de8396698ecad62394bd6080a3b66f51d7ab96fef568bc69f4220ee73e09c014736b1494db0841ecb899a675900200e2262e3689fb1cb009edacb9059db43888517b6e7e19f102f97331018eafb469a5bc1c1e3884dddfdb3f895dec6c31782fd7b78ce43165db6a61dd6d0025b36d94651d006ad9119a25470", 0x9f}, {&(0x7f0000000340)="753b24b07abc73c6bc0ed3c72ed7a9dd16eec36a31cabf51dbc5be8d0398b8edd21e8fd64fd5ae50d43a401af19300a42501efc7802d463e39a2df5ec5398aa73343463b57d04e", 0x47}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="9800000000000000c501000005000000493f9a4f7f5205c649e601e02647f11a1b6df22489ab81c8fe7c9f576ba0f86e4e335957b76d395b4270ca9d32ff09e4917d7c55fb2f1b81b4bbfa1f77b60f1ce94474f6a075c77432031d7abbb350a6ac63a95d38731b89f045cadda241e2e2d65aded6aa03dfbe5f056d43df47d7393302a1048f230c72793bc14db58cf5034d7ca4d41e0f2c3d"], 0x98}, 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x2712, 0x0, &(0x7f0000ffd000/0x3000)=nil}) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x0, 0x2}, 0x0) epoll_create1(0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x8000) 22:43:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 615.464070][ T5633] atomic_op 00000000c55db691 conn xmit_atomic 00000000cd21f677 22:43:20 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r6, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\f'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:20 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:20 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5a664c1416d008ae}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffff8, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x2010814}, 0x880) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0xa5a8690743c2b926, 0x3f, 0x2, 0xfffffff8}, 0x1, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x80000001, 0x7, 0xfffffffffffffffb, 0x1}) 22:43:20 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40440, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = open(&(0x7f0000000240)='.\x00', 0x40000, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0)={0x1ff}, 0x4) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x1bf) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="000000000000001b0000000800008ce58e70e23fabb6d523becd3628c7fdad8ec1871c3dc91002853b6dbd3921c5d412c955f1ca1d55cbe9a21cc6a6a41f571aca505375c2754797a15ddde62852fd05804900"], 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f0000000100)={0x8, 0x40, 0x1, 'queue0\x00', 0x400}) epoll_create1(0x0) r9 = msgget(0x0, 0x607) msgctl$MSG_INFO(r9, 0xc, &(0x7f0000000280)=""/71) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:43:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 615.906205][ T5746] atomic_op 00000000a86153b5 conn xmit_atomic 00000000cd21f677 22:43:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r2, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:20 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x0e'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:20 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xb, 0x0) getrlimit(0x9, &(0x7f0000000280)) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x7, "e3da179998e1f1fb9e056a18a0209fe7488600809fb2e9a1f47abd74217b0f68", 0x1, 0xffffffff, 0x0, 0x100000, 0x2000000, 0x4}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) accept$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x2}, &(0x7f0000000240)=0x90) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000740)={0x0, &(0x7f0000000700)=[&(0x7f0000000380)="15206995debff9d489e3d5069abc65cfec", &(0x7f00000003c0)="cf6db7a7fe564a95c9d266eed9b954ef1dcc15965129cbf8a341954737ec1bd4f94f1d7ef00babf79f775d33bc5e19672468fcfcee4400767e5b87d13f9b6598a90718e26f6511781c0ac6834c7eb464467f49f58e73a05a8ac5091868f0c764ee931c9f43075e1e4c4654e1737d0257b229b39c67069d54ae0e91dbaf6ded79b969cffeaaaf788796976b1270b33d8b1a6af3f90a7be71e6536d3cd6bf3d117267a204e1e79c99ce6cccd86b12856a31d74b9f4d730da97ec6724", &(0x7f0000001180)="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", &(0x7f0000000480)="e128bc8cb4743213613791ea457ba734c2d4a827c23235abf80cca5807631cc9c19af04ed10a89fb6d43f8b02ee99b5abbb749ba84f70bb6a42d991f42a7e62c97886412e1709b48855e5c8ceccbff1cb34d4a4b076f21658f99086fe496cff0bb1cd7bf397b77450f95ab26c5d2a2f0db7dc8655d7babf4635e8100e7768fff7e61bed1614234f4a95c23da8089b43c3c9fe4b35be9eeed1c092d4a2e55ce5be1949f9052051e96125a49104ab1116c010462fbc7c9625f798140b1da", &(0x7f0000002180)="a2672128d0ec96a422f139a9cd774fcbc465787b77a22bf91bd2f54cf4df7743c3dd6e0fcc2b964304f189384110704a0af95b14ab29a142278a56a51ba535a666b3c07eee81d06215f7efd45ccd9d7eedb1670d87789141048e37c747f8e20bfdc2426429c573582e9bce5b61590ae2403ffdae5f25ae85af66e9698904d4913f234d716275bb8c94c8fe0d47d51bd83cfb24d1ae7e7316725595414bebbbc8817059aa567ed4e20beda91083292c5bde513a06a8c18269b8aa71ce834720a4450df648121a08f2f1d9259ec758a17eaf20a27468729fe3c5a64f159125cbf60f6729c0db4c015dcc7bf3dc32d6e0265d187056cb489c9c47b2dc37267c0ed3ff43a6f48f32bce044f1f2bf6e0b3712bb4c9d2ddfe0036f4b791d58f8875bd83a46f3659223fbf2ceef9f843d3b07bd70c2f9fd07e2514db92d1054ef2375306dfbaf64ba7cda107a4054f343ec6f9f44541766daa235fce16400e0b00a35de498d2eb05b0e0ac80d513e5b8e2f2fe401f8ddb2acdcf9e3d5ea432268839810998e484cb8e4e6003d7f4f2ac845458563ed8276c4fb426c82f28bfce21c92fd00f888d946e191d44d0340dabdf31f7e9c2a981cdc8b2acdeed546b1749ff3edf5cea00c1031bdf0acb15a9fb71fa1db5b8ec77b3f1dd1ac1f8bf86845ae853906133383e504bb244222323ce190427e445ab23030fdb291f6d4ead87202c69b4234d8aad2438dac32f2d8a109c86ce950c7a9046f3b261f3fc5f2d936fe0ab574791eff7014d4adcc6e539de2acc498771ffa4e4e811117fcfb3acdda0c96e85110524b02257864a8023d5b0501907735cff6762e1cdb5392bbf12e76b3f81107667ce853704657ee1b0dcd5700d6f943c109a6538707269b029d323a0672f3c17008a9dd431ffdd55f228433d8cda309f4a3f4765a260e8b93246bd0feecab38246c70f7955d576472c6e7c97f9b80ae68061051d823966285cb87d29ffe1c40df8fc1e150e35968bd30a70a7e82332cf37dff31beb76c56961ae3a48cb1e1ffa9002af1fbaa65741d983f3e6086c1352be5e101581a2d7ad7647d279c59c4ef9d0409af05e0bd7ea0e56e019e5da5ec7d3a816c54ac4656a3c05ce82a6db1f64710bc1e772d18f86464b932d87dbad616ee86720ff899531b84e4c3ada3d300a0e0d69b4fdedd93f0d76da3ba32f401c2661e939ec2bf16843a63d713d490bbdbc386a8eafd2045857a603aadc5b35ea5935cc956e091d10c730655b2d8113f36269bca4e7ad6153a86db6e42c3e3b5ba6d0f8b2f91d82be6b312a8a8093b9eb8595d70506ba14edf876758409e3000508b47122c913fbb645277f2ff5de40edc18621e5ca130e7a1e05ab7028300141e913b9dda34b944ace0992ba38f1cc2754036e318bff5eca6c1e328e91114cf8120c52633672d57ff1a7a5bd15e87b9be042cc3932c6830bab22170461af5ef87bae194dad3cf92c552590ef48c53748c894bb3294559f7b043787c8a06c940bec250d9ef234da3f1cda967b71183cd099ad38b2d343abc86586575062be72eb3d110d34de0d5b27ec84a6f6a557429da6d3862204af4b2ef25442c44fd245864e033c2cf0a3ce6375eb15f4463392d7ca404719d03ac0024aa55b2194b50313985751ddb6677d1500861e7052b14f308067035049339db6841b914391f3e0a952f887a4ca4fd5c400dfe1a5052a5967d39deb85984805ac932a978c9f8a0a517836be926823c3285d41b602af645701dc76f7fbdd80a1967301372f94699106669b6900a264a89101191e1159549383bf1175a848acb9f1ee7e4faf6520cefbfce5604e6298feefc4285c06f635bd57e489b3278343b8dc36d5cd89128b846f28cbb0a6a969bef1194e7042d6b057340e9b44b8455986a3c300b0aee7847aeb3eb9c2ba65aae1220047f02ceca1b8532bc8116b30a5f7697edcae8cd1042f1645bd98d0f66a198724b0d6e99f5f36c6820feaaefe803a14bf19189dcfe39501b031614693757c884096e0355ed4bf0111021c5fcb9fa67a9bdac1b1afa2cd75a27990ff7c4a9bd15cc19cce8c9db1ace1cd873776de983d7a147abe003b04b2ada023598ea558ccecf885c50db38d7ccb34dba63fc9877b960425d230dab00de2c539e109603f0cd79d9bc7b34e4526ac4da07fbab752910786ad27f45969ac3820444ecc34630f196dae357da60e90821ecb3a6161131cf56f988446f777966bae676673278e86d5c980067adeb2d87286fd4c9608241b0f5bdd115413a8693060fe7b3b1ad9885b78bdc68763205b3dfae30580f8b69c54175c51dc4b9a23f14515ce9839c25c8f1fbbf742084ce7baf0e03d2685e52dbebc797746336b22eb9faeece3d8bf46ef559499b60cc43eaee8e4448a4f3dd20ea7f742f3d1bfec222e36ea6d16c7830f32d16718e2306449389ba5aeb7698e259f95dc90d213ffa02dea87db35321e288018c0f1a312df02f4b9f3944ea7a362482a2a7a00c725d41d12920dacee8801a4748883801b4064e61583249726c32868e12dcba3f7a81f23e26acf907b6370e93ba2425dc13d3a13a5dc86c1e10639a0ea3dcf880786c740b1335e3499605eab6237e89e09441d639a44f714cdf1880cf914601be51973eb879fb14ea925342d6d2675f7a7578aa6093717f50cb7f69b1822e7566f2d409e49559e8fd87ab4a02e428799938ebda47ca902510609225c98ce82d67775b37ba79996e5870e6c3eff5027ad6779be2057e4467a7c7247aff47c2e30f7f2f871a359ff7b614e19fed4e3f4ac24ebb4338977806480465fadcfa26b38087621d219921fb83e9e4f0c89353bd798a60f9adce9081559e127311de8b486a4c310743b5d7900c6f84a427d88ff3911d827e07cde31a4278a62c366142b50f5cdba05d581cdc0688394b5376dcb7d50d965a65b593957dde587eba73bed57007edd6d6d2481ef8ece0ecf65f7e14d04d2cb92e6e10ce5b02f64847d9312a89bec19575493a53611959f23c4ac52b5328157145b425713dfa0bbd145618fdf93df77cee4d57b8b04161594c085d8f5e6e13c1bc8aab6b19ccdea4d24654a0f300f2d251aefc080d7ebc2a25313ad35bef9fca0b83da1cb00865a49404363d00697dabcab930f1ff2c7eb05668bdf4e9c25eddb773442a607b5556650a13f9ed01630ca0221b152b10f561ba511bab82fc377021f302804d5fd4ac873df68970a8445ae87b0b1b76c3936bbdad3e578c553bc04b8c59cb6d2c5904185615abf1544066ecad9f4f93726cd343a8f065bc53ef645ab8449375e9e232a81d84fef6d0107502e369e7b75f67590bca8def0361363976101632992f10628e9eff8a862d8efde34f49deb7db1d3e90d01232de8f0d22eda792adbf93a0e704180504a5d41b5398f1ae2d2775099e78397cf510cddf31dab7ba75c814dc70fd2801dd08cbe21ed4f26df5011eb794c851cf343534d72b76a01f49e826fe8bbb6b32f824f22d58440698c4af034b3b77fc63b1b27913de3f3b3881bd7f96303385de24e6bdcc4372115b42b20bc6583b8e83ad31d8dcaad630472b75bd35bfeea27e8322dd33f1eaba625af03422c4a18ab7cc000c8b49d92ce3b3e39b3d93b37f904ed7bbdc55f5ea830fdf4fcc465257a0d8f9ad9879fe65b3e753f96d48ce695b71ed1e7111fe7cb3c77d59d9aac5fcdbfd8857cabd439264be86cad379379612f83c346879ee4da023a11ed3373b1d9191a809ac96cbc66a8b565d0854a0d385218eb9306a7a0a839935f9def35ee0d0da123c2e80092c872b0b80f3c411360fecfcfea4b60422d6b362a800d2cf7b3dd12a3485118de4c0c9f7f867ff6ef97b58f2f7ca4c74b1f3816242183bd6819685203a64730d6a77d6bfbac0609290f95defa9f5022b96f4e9c31fd8e23990153c93fa7e89cd1e7c750e90b0989e8f2f76ad23ab2e58d33955a932e85af02875da72c2a83e75c4d7126355d8b7c8d8c7b7357eb755020a1ee2e0624b94fc71737911369993c83915e48b35a5315166518dda5cb9389b197adef7495a2799ea15dd6d248f920400fc0126520661e7bb854ba6cdb2b2394eaedb821a35902676ee9f4d77f4b30647180e50fb22ec8e50c983e5e86f99436b16fdfec3314bfc913941747e1e8a23bf9ef882172b8710e3dec6aa22b1316472143e8a72d9ff8e9f26124e33371ac61b5570e2730a8e70cf06c4ffb9326860d7c378a41537f8cf802b59e8ff19b7f3075eb314022a1d54dc863c5a3b8dfc65bb979f4bc95839990e850a2bcedbd0b9e50cbcfe9f8fd50b3a6e1d087619527b3b137e94c52578e96dc365ab844e21ce781c227ca8bea3c6232099cda01aed450d888615ae9050b32c897a30485cf7913b8bdb6176927e1ada955a36dd790ca5247bc7f0518de0bfd4138266b6079068e344f09c2d0848c9186d38bba0167a4c675aec354916a8eb9e87865731168cdf1c019176c0aee910b7c4c55a2accea9d8956f85d1c4175442e29c2307d616efef75269f66b0bffb457022660e58f1c07d6861b525bc2f183ece1671e74e0f5c3c9309a085eec1195a1976247b6ad2567673ef78eb6ab46ac0261aecdab50fd2ecb631ad5ac69d7cb55a1ba13186a94c276a094acf3f689fd24b7997989bc9628ede7a31f3f8d6a6fa8fb8208d085dff290986f64fe725e51480c99518d87a6363c040b77fbc4947164c6b65c76d0c3d3c2f97f6494e495255da841d431132757bde34740d60e23e0ad8a7823264a878e85254efa3a58cb0f2f172854b566472b21998a58a0ea2b70ee4bc1a512e56063a139ee238488f8713ef3e0fa63df8b3e2479bd420e00de81b356bc040f871996fdfee1f4c155aa5a8331d5fbf4bd9524b36ee22d024e92db95bc031fe9b6fd8779d64ab35193a5e9ca35704bef77941c04d8ad6d58bda9ad09378734d027194372a4b2b53eee12888341e5da3b69b36c80758ff2b0a23996768546973d44936844c961dd06f765690597163931a38e53606e22acd87b066cdceb62bc2bbb21093c2c7116f93e1c0996bb49b540ea4cfb48007be26f8de32e570c0b5284f5e87efab4a920aef394149dbeafb6752dc4ca32760e818eb23872ab99037c612e79e3ee5c2e10980fa83165b7b647fff6046d9b4223ee891064067d4d1f9e6d07e2833ea02d507d18d4993453f746f434b3d880c3b597e1284e1b92d8c08015512499c7aa8e6cd25fb30b0a2d87056006195522d9605786406f85f0de68b3750062b9a07a5e33bbe30e67ee1823ba27791ee0cc6a7277bb9a5cbe5702f1116269c4fb77f10ef68401a94835908fb94b5c073545031a726328feca4d499b0fa626073cc379d2ac3426e768c039b5c4f8ab438bbbaebfcde806acbc6c2bf7fbc94eab64da7cc17e6ecafff34d4409d79c207eea39d735cf020bd3bea0f902ff626552b33a3f8e318db53ae58f06dab6a28124b3e1148a568a86bfe9b658d1c8210af03a6bc623027717b05d2944138d39f85666ca927c6e9e027f512ce8c086cddfe994060aa62260e861ac12169fad26143e1f884a172915118a395feab06d17b70776d2ff284a7b774dabc4d3acf2933da8e17d0eea657af53f60968351ae50e8959e7a70d49ab052509f9c19331d1abc2b84532ad2fe1ee753fcb3b0bd359f87ddc019ba8df600b40b9bb137fd55f0eea8e87434331df663825c9ff2949f4164f3053426f7dcc70e8382fb23458fcc3c4abaaaa5a7d5fac7017d24c3589f7bf632bc61056211608ef077f2dc77e7", &(0x7f0000000540)="af3d88e91a3c1877082ad578dafeb564f08fec8c73be159357ff85d33e6815d2d228c9323fd4c74cb06ad69d17fb36ea697c42f1914eeff0c480cc91036caf5e50a98e72fb7d7e848c488b003e485a0193923ca876acbb0c160c759d017019da319481ed16b04316b9b91d", &(0x7f00000005c0)="0e9238d4316bc61ca92627f70fa1269bdb823aece081b7fcb3e9f945c8500e200c20973eac1f83752227a5184ccb51a5545630e09d5e5eab1458cdedbcb8a125fc406a25817b5017f2808750abf6b26953605e84ce516e1e4ed09e7472b713a614886f9303a1067caa6e8d8a27f7f5a65ab915de957e7e1d3793736163d6ba902ff5ea3509d962b8082ef095487e801999d6fe26d37d1dabbc4d477ae3eeda513859", &(0x7f0000000680)="7e6d1be561ad98ba8ec33606eba9f4a95ff09cbddfe1a09b947a647052964bfb756765bb2f0ce9209b96c23fc2a5183c10da98fbac5cef78c85a51171438cd6a0de1c67d71d1d052629d5f"]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000340)={0x8, 0x2b0, 0x4, 0x4000}) 22:43:20 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$P9_ROPEN(r0, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x80, 0x2}, 0x2}}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x4800, 0x0, 0x2, 0xbc6}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x7, 0x6}) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8800, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x80, 0x1, 0x51, 0x0, 0x7, 0x1, 0x4a, 0x3, 0x0, 0x3, 0x6, 0x1, 0x0, 0x0, 0x9, 0x4, 0x5, 0x6, 0x0, [], 0x68, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0xff, 0x7, 0x4, 0x1000, 0x1ff, {}, {0x2, 0xe, 0xc9, 0x80, 0x9, 0x3, "61264997"}, 0x101, 0x4, @offset=0x4, 0x2, 0x0, r1}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r3}) epoll_create1(0x80000) 22:43:20 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x0f'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 616.238170][ T5883] atomic_op 00000000f1e74544 conn xmit_atomic 00000000cd21f677 22:43:20 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) epoll_create1(0x0) 22:43:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:21 executing program 1: getgid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:21 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x10'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 616.520438][ T6007] atomic_op 00000000893d9840 conn xmit_atomic 00000000cd21f677 22:43:21 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0xd, &(0x7f0000000000)={0x0, 0x7}, 0x0) epoll_create1(0x0) 22:43:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 616.837589][ T6131] atomic_op 000000007f923094 conn xmit_atomic 00000000cd21f677 22:43:21 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000480)=""/4096) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) splice(r4, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:21 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:21 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 22:43:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapH'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:21 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80, 0x7db924ee28e10429) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r4, 0x68, "ee1f993b7bac5238ee2ca3852d859166a4fc3c815c30825b23c1c7f60f46d11d77dd54e9296b4d850d12fcede29c548529683bda4ac74ec289b1e380f5226c2a9beed921f9ec19b7d3f3585ef99c4ce13df02cb2b030cde00018bb5a6d179acbeaf62b6a63370f57"}, &(0x7f0000000180)=0x70) epoll_create1(0x0) [ 617.133500][ T6243] atomic_op 000000007f79783b conn xmit_atomic 00000000cd21f677 22:43:21 executing program 1: prlimit64(0x0, 0x8, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x1) epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4e, 0x9c9d527a1c27e605) 22:43:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapL'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:21 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:21 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) accept$alg(r3, 0x0, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r4, 0x0, r1, 0x0, 0x10000, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) 22:43:21 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00\x02\x00\x00\x00qB\x97Q\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r3}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x80000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x144619cf4b0d1a16}, 0x10) 22:43:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x2, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:22 executing program 1: prlimit64(0x0, 0x3, &(0x7f0000000040), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0x80000001, 0xd17, 0xfe, 0x1, 0xff, 0x5, 0x41, 0x9, 0x3, 0x1f, 0x1, 0x4, 0x6}, {0x5, 0x5795, 0xff, 0x3, 0x7, 0x9, 0x7, 0x1, 0x3f, 0x0, 0x3f, 0x2, 0x800}, {0x100, 0x4, 0xff, 0x1, 0x0, 0x1f, 0x8b, 0x2, 0xc, 0x0, 0x1, 0x9, 0x7fffffff}], 0x7}) epoll_create1(0x0) 22:43:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap`'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:22 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 617.581575][ T6388] atomic_op 000000007dcbf471 conn xmit_atomic 00000000cd21f677 22:43:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x25dfdbfe, [@sadb_x_sec_ctx={0x0, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_buf(r3, 0x6, 0x36, &(0x7f0000000040)="a72613bf2467a2cb5326aecde2c165500c5825b8135467ec612642742bffecb29d51976f0fa512831fc667cc68ddc86129757d55f1c5ee137cac59ff1e3bc2321dc28343085ee7464f9f070e05e2e77df5d6435b394597a1c42c6927afce36d5b3c64845fbc6207543f6652bcae7553fa6742f45a28d0276ab5e51996aa520186ba6908a", 0x84) epoll_create1(0x0) 22:43:22 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0x1, &(0x7f0000000040)={0x40}, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000000)) 22:43:22 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretaph'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x3, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:22 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x12100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu\x7fcpercpu_user\x00'/26, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 618.035317][ T6527] atomic_op 00000000ad7032fc conn xmit_atomic 00000000cd21f677 22:43:22 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newaddr={0x20, 0x14, 0x802, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x424ebac2bc350337, r3}, [@IFA_FLAGS={0x8, 0x8, 0x71d}]}, 0x20}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r5, r6, 0x0], 0x3}, 0x50) sendfile(r4, r7, &(0x7f0000001400), 0x2) pidfd_send_signal(r7, 0x3b, &(0x7f00000000c0)={0xb, 0x80000000, 0x10001}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r8, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:22 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:22 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapl'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:22 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) clock_getres(0x1, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r3, r4, 0x0], 0x3}, 0x50) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r6) ptrace$peeksig(0x4209, r2, &(0x7f0000001440)={0x100000000, 0x0, 0x4}, &(0x7f0000000080)) 22:43:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)) epoll_create1(0x0) 22:43:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapt'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:23 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x5, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040), 0x0) epoll_create1(0x140000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000001108000a002e0000002400120008000100736974001800020014000200fe8000000000e1756b2f0b2ebcf800bbac3c78395d891e73128de2aa9f9d81faf113cd2b8639370d3999f1ed0f4eda"], 0x4c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') socket$l2tp(0x18, 0x1, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82008a}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0xe8, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x34b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x457}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x28e1}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18000}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff7fffffff}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x702a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd188}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23f64d40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x101) 22:43:23 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) [ 618.709657][ T6796] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 22:43:23 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapz'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:23 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:23 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xba32f775dfeecc7c) prlimit64(r0, 0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = epoll_create1(0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000180)={0x2, 0x3, 0x81}) 22:43:23 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r3, 0x0], 0x3}, 0x50) clone3(&(0x7f0000001540)={0x112000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x37}, &(0x7f0000000300)=""/86, 0x56, &(0x7f0000001400)=""/208, &(0x7f0000001500)=[r0, r2], 0x2}, 0x50) clone3(0xfffffffffffffffe, 0x1000000ea) prlimit64(r1, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) [ 619.441162][ T6902] rds_sendmsg: 2 callbacks suppressed [ 619.441174][ T6902] atomic_op 000000002b39efe2 conn xmit_atomic 00000000cd21f677 22:43:24 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x17, 0xb82, 0x7, 0x9, 0x0, r1, 0x1000, [], 0x0, r3, 0x1, 0x4}, 0x3c) r4 = socket$isdn(0x22, 0x3, 0x1) r5 = dup2(r4, r0) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="880000002810dfede44639ce5699d397330ed7eab8da899cdac213c0e5169ac5256ea2e368ce2c909c7a1265097fa227d7ee9642a4e82798afbb6f4e2414bf337e025a9a0c78c0110f9a70bb9d43de68393a3b9ed5d75ab48b68f0082e0bd61d213a3a904edc2a00ac762b92aa80ed36474e764279291d0ca2d9ee168ddd267eac50c6c83ee198748cc999b2b2a3766cb21895ceb8e609ede15927b235d70d7727482583acf5848161322ae0de767a48a987d9b5216e8d24a55ea31957aa718759896944adb0d485a6b72cca7e96eb0e2aa23268b7205de7ad350687ef77134f7eb839fbce0df1a63fa356dcfeb4c3b426445064d0"], &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r6}, 0x8) epoll_create1(0x0) 22:43:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\xf0'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:24 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:24 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = syz_open_dev$media(&(0x7f0000000540)='/dev/media#\x00', 0x5, 0x10040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x20100, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x404000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000640)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) pread64(r4, &(0x7f0000000580)=""/152, 0x98, 0xa5) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x1, 0x11, 0x43, &(0x7f0000000100)="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"}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) fcntl$setstatus(r5, 0x4, 0x0) [ 619.737386][ T7032] atomic_op 00000000f28946b6 conn xmit_atomic 00000000cd21f677 22:43:24 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = fcntl$dupfd(r0, 0x406, r0) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='@}#\x00', &(0x7f00000000c0)='#GPLself\x00'], &(0x7f00000002c0)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='-,mime_type\x00', &(0x7f00000001c0)='(wlan1GPLem1trustedwlan1^-em1\x00', &(0x7f0000000200)='selinux\x00', &(0x7f0000000240)='mime_type\x00', &(0x7f0000000280)='.\x00'], 0x400) 22:43:24 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400201, 0x0) ioctl$KVM_NMI(r0, 0xae9a) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r5, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:24 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0xa, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:24 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) epoll_create1(0x0) 22:43:24 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() r3 = syz_open_procfs(r1, &(0x7f0000000140)='net/bnep\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r5, r6, 0x0], 0x3}, 0x50) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r7, r8, 0x0], 0x3}, 0x50) clone3(&(0x7f0000001380)={0xe896acb5d665ed37, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x8023}, &(0x7f0000001700)=""/239, 0xef, &(0x7f0000000380)=""/4081, &(0x7f00000002c0)=[r1, r2, r8], 0x3}, 0x50) prlimit64(r2, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:24 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCDISCONN(r1, 0x7439) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) write$binfmt_elf32(r2, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x915) [ 620.187669][ T7157] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x48, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:24 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:24 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x202, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000080)={0x1, 0x6, 0x4464, 0x9, 0x6, 0x7, 0x1, 0x3, 0x4, 0x81, 0x0, 0x2}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x1, {0x6}}, 0x18) epoll_create1(0x0) 22:43:24 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000096368fe07072b03003700000a0014000300450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x85'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 620.505666][ T7275] atomic_op 0000000084e28b96 conn xmit_atomic 00000000cd21f677 [ 620.548258][ T7282] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 620.603002][ T7282] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 22:43:25 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/229, 0xe5, &(0x7f0000001400)=""/4096, &(0x7f0000000000)=[r0, r1, 0x0], 0x3}, 0xffffffffffffff2d) prlimit64(r1, 0x8, &(0x7f0000000100)={0x7c98, 0xfffffffffffffffe}, 0x0) sysfs$2(0x2, 0x800, &(0x7f0000000140)=""/10) epoll_create1(0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x341800, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/35) 22:43:25 executing program 2: 22:43:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4c, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:25 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f0000000140)}, 0x10) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) recvmmsg(r3, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/130, 0x82}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/153, 0x99}], 0x3}, 0x4}, {{&(0x7f0000002580)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000002600)=""/116, 0x74}], 0x1, &(0x7f0000002680)=""/154, 0x9a}, 0x7f}, {{&(0x7f0000002740)=@tipc, 0x80, &(0x7f00000039c0)=[{&(0x7f00000027c0)=""/93, 0x5d}, {&(0x7f0000002840)=""/141, 0x8d}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/158, 0x9e}], 0x10000087, &(0x7f0000003a00)=""/44, 0x2c}, 0x3}, {{&(0x7f0000003a40)=@rc, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003ac0)=""/198, 0xfe3d}, {&(0x7f0000003bc0)=""/200, 0xc8}, {&(0x7f0000003cc0)=""/241, 0xf1}], 0x3, &(0x7f0000003e00)=""/4096, 0x1000}, 0x101}, {{&(0x7f0000004e00)=@caif=@rfm, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e80)=""/254, 0xfe}], 0x1, &(0x7f0000004fc0)=""/165, 0xa5}, 0x200}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005080)=""/82, 0x52}, {&(0x7f0000005100)=""/121, 0x80}, {&(0x7f0000005180)=""/13, 0xd}], 0x3, &(0x7f0000005200)=""/188, 0xbc}, 0x2}, {{&(0x7f00000052c0)=@generic, 0x80, &(0x7f0000005500)=[{&(0x7f0000005340)=""/91, 0x5b}, {&(0x7f00000053c0)=""/88, 0x58}, {&(0x7f0000005440)=""/146, 0x92}], 0x3}, 0x9}, {{&(0x7f0000005540)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005940)=[{&(0x7f00000055c0)=""/90, 0x5a}, {&(0x7f0000005640)=""/142, 0x8e}, {&(0x7f0000005cc0)=""/44, 0x2c}, {&(0x7f0000005740)=""/157, 0x9d}, {&(0x7f0000005800)=""/52, 0x34}, {&(0x7f0000005840)=""/250, 0xfa}], 0x6, &(0x7f00000059c0)=""/149, 0x95}, 0x9}], 0x8, 0x2100, &(0x7f0000005c80)={0x77359400}) r4 = accept$alg(r2, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x60000, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000005700)='lo\x00') clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r5, r6, 0x0], 0x3}, 0x50) ioprio_get$pid(0x2, r5) splice(r4, 0x0, r1, 0x0, 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xed89cf543826f1a4) 22:43:25 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000040)={0xfffffffffffffffe, 0x8}, 0x0) epoll_create1(0x0) 22:43:25 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040)=0x1, 0x4) 22:43:25 executing program 2: [ 620.911458][ T7407] atomic_op 00000000e278f567 conn xmit_atomic 00000000cd21f677 [ 620.933627][ T7412] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:25 executing program 2: 22:43:25 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x60, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:25 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = dup(r0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) 22:43:25 executing program 2: [ 621.248102][ T7532] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:25 executing program 1: prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5}, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x880, 0xc) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3f0254122eecdd40, 0x4000010, r0, 0x8) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = gettid() r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x6, 0x81, 0x7, 0x1b, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x189115e3, 0x6, 0x9e3, 0x8000}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb4, 0x10000, {0x6, 0x12345543ced6bf6e, 0x7, 0x2, 0x0, 0x0, 0x0, @in6=@empty, @in6=@local}}, @sadb_lifetime={0x4, 0x1, 0x9, 0x2b28, 0x2, 0x6}, @sadb_x_sec_ctx={0x4, 0x18, 0x6, 0x3, 0x14, "bb973d9c54a726cf31c97b23dfc6f1a304bfc631"}, @sadb_ident={0x2, 0xb, 0xc68, 0x0, 0x3}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}]}, 0xd8}}, 0x800) waitid(0x0, r2, &(0x7f0000000180), 0x8, &(0x7f0000000200)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) set_tid_address(&(0x7f00000002c0)) epoll_create1(0x0) 22:43:25 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/73) 22:43:26 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2000, 0x7cb6, {}, {0x1, 0x2, 0x1, 0xe1, 0x1f, 0x2b, "0af89ce0"}, 0x0, 0x0, @userptr=0x4, 0x9, 0x0, 0xffffffffffffffff}) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r6, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:26 executing program 2: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xc68, 0x0, 0x0, 0x800e00325) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/66, 0x42}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r0, 0x0) 22:43:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x68, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:26 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shmget(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) epoll_create1(0x0) 22:43:26 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$inet6(r2, &(0x7f0000001400)=""/215, 0xd7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xf}, 0xffffff81}, 0x1c) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r3, 0x0], 0x3}, 0x50) prlimit64(r0, 0xe, &(0x7f0000000000)={0xfffffffffffffeca, 0xfffffffffffffffc}, 0x0) epoll_create1(0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x201) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0xffff, 0x4) 22:43:26 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3b) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) [ 622.071720][ T7667] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:26 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x100}, 0x0) epoll_create1(0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0xa5cc1940429c92c3, 0x4) 22:43:26 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x3f, 0x5, 0x3}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) epoll_create1(0x0) 22:43:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6c, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 22:43:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 622.433309][ T7794] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 622.444342][ T7791] atomic_op 000000008156bfb5 conn xmit_atomic 00000000cd21f677 22:43:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20, 0x0, @mcast2}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000080)={0xfffffffb, 0x5, 0x4, 0x100000, 0x1, {0x77359400}, {0x5, 0x8, 0xff, 0x8, 0x5, 0x7, "b9de4dba"}, 0x3, 0x4, @offset=0x2, 0x0, 0x0, r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r11, 0x7, &(0x7f0000000040)={0x0, 0x7}, 0x0) epoll_create1(0x0) 22:43:27 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000180)=[{}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r3 = dup3(r0, r1, 0x180000) getsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:43:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x74, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 622.659226][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.769204][ T7906] batman_adv: batadv0: Adding interface: veth3 [ 622.793690][ T7906] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 22:43:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d00001500000000000000000000000100180000003c020800120000000000000000000000000006000000000000000000000000001d0000000000000000000000000000000000ac1414aa00000000000000000000000005000000000000000a0000000000000000000000000000000000ffffac141400000000000000000005000000000000000200"/152], 0xa8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x180800) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'eql\x00', r5}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x12}, @empty, r6}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x80000, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000180)={0x2}) epoll_create1(0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x480800, 0x0) unlinkat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) [ 622.823465][ T7906] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 622.842512][ T7914] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:27 executing program 1: prlimit64(0x0, 0x5, &(0x7f0000000000)={0x0, 0x1000000008}, 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) dup(r0) 22:43:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x223b40581a4b712e, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x3, 0x1000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 22:43:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7a, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 623.064532][ T7870] batman_adv: batadv0: Removing interface: veth3 22:43:27 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, 0x0) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='%!keyring*md5sumtrustedcpuset*}\x00', 0xfffffffffffffffe) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x20}, 0x10) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x101, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x7}, @in6={0xa, 0x4e24, 0x800, @mcast1, 0x1}, @in={0x2, 0x4e22, @rand_addr=0x7}], 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0xd, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0xb, 0x8, 0x278, 0x0, "8309ef9e54914091755c02d27dc6df64032f94aac91938ed2fb0d9faf6d64e9c1ae6d50860d36609533d99fddabaf98098f687ce840c4a0acbb291dd17290c175482e61a996729fe543120502d4070"}, @sadb_lifetime={0x4, 0x3, 0x6, 0xffffffffffffced3, 0x8, 0x1ff}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_lifetime={0x4, 0xd78c687edaa81aa5, 0x7, 0x100000000, 0x7, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x5a, 0x0, 0x0, 0x70bd26, 0x3502}, @sadb_ident={0x2, 0xb, 0x81, 0x0, 0x7f}]}, 0xd0}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r5, 0xa0002000) 22:43:27 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:27 executing program 1: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000080)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x80000) [ 623.353528][ T8085] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) r1 = socket$inet(0x10, 0x3, 0xc) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @local}}}, 0xa0) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r8 = gettid() waitid(0x83b895581628fca4, r8, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRESDEC=r8]], 0xfffffffffffffe56}}, 0x20004850) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r7}}, 0x38) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r10, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r11, &(0x7f0000000140)="150000000800000000000000c86b6525", 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r11, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0, r9}}, 0xfffffffffffffd76) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x300, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:28 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0xffffffffffffff00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x20, 0x7a, 0x7, {0x1f, 0x7f}, 0x3, 0x1}) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x57, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x9}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 623.769543][ T8153] atomic_op 000000004b009b45 conn xmit_atomic 00000000cd21f677 [ 623.780305][ T8156] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:28 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xfce0f6a7f665bbe8, 0x0) epoll_create1(0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x400, 0x3c1100) 22:43:28 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x500, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:28 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xb, @sliced={0xe0, [0x3ff, 0x7fff, 0x7e, 0x6, 0x6, 0x3ff, 0x7, 0x5, 0xff, 0xb1ca, 0x1ff, 0x1, 0x9, 0xfe6, 0x101, 0xfc00, 0x1, 0x8, 0x6, 0x1f, 0xffff, 0x5, 0x6, 0x4, 0xcdf9, 0x3f, 0xd56, 0x0, 0x1a, 0x80, 0x8, 0x81, 0xa7b, 0x3, 0x3ff, 0x20, 0x4, 0x6, 0x3, 0x1, 0x8001, 0xff81, 0x400, 0x8, 0x8, 0x9, 0x1, 0xfffa], 0x5}}) 22:43:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:28 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, 0x0) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='%!keyring*md5sumtrustedcpuset*}\x00', 0xfffffffffffffffe) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x20}, 0x10) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x101, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x7}, @in6={0xa, 0x4e24, 0x800, @mcast1, 0x1}, @in={0x2, 0x4e22, @rand_addr=0x7}], 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0xd, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0xb, 0x8, 0x278, 0x0, "8309ef9e54914091755c02d27dc6df64032f94aac91938ed2fb0d9faf6d64e9c1ae6d50860d36609533d99fddabaf98098f687ce840c4a0acbb291dd17290c175482e61a996729fe543120502d4070"}, @sadb_lifetime={0x4, 0x3, 0x6, 0xffffffffffffced3, 0x8, 0x1ff}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_lifetime={0x4, 0xd78c687edaa81aa5, 0x7, 0x100000000, 0x7, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x5a, 0x0, 0x0, 0x70bd26, 0x3502}, @sadb_ident={0x2, 0xb, 0x81, 0x0, 0x7f}]}, 0xd0}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r5, 0xa0002000) [ 624.125722][ T8278] atomic_op 00000000f2c04b5e conn xmit_atomic 00000000cd21f677 [ 624.207703][ T8284] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:28 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 22:43:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x600, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 624.451652][ T8397] atomic_op 00000000ce08b1d1 conn xmit_atomic 00000000cd21f677 22:43:29 executing program 0: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)={0x1ff, 0x1000, "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"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0dff25"], 0xd) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x4000000, 0x0) [ 624.606412][ T8467] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x700, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:29 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40281, 0x122) ioctl$NBD_DISCONNECT(r1, 0xab08) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xca, 0x8, 0x0, 0x3, 0x1, [{0x0, 0x0, 0x20000000000788, [], 0x80}]}) [ 624.826172][ T8512] atomic_op 0000000099af9c88 conn xmit_atomic 00000000cd21f677 22:43:29 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0xa00, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:29 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r0 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d00001500000000000000000000000100180000003c02080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ac1414aa0000000000000000000000001f000000000000000a0000000000000000000000000000000000ffffac1414000000000000000000050000000000009d5d9c95e8a81670c9813064a8c20002000000000000000000000000000000f0c255e8de958372f7b31af35cdc9e89680a7ded2bff818d76d5617d1e5dfbbdab822b550375530fb5"], 0xa8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(r0, r1, r3) epoll_create1(0x0) [ 625.089107][ T8624] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:29 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) epoll_create1(0x0) 22:43:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x2000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 625.462098][ T8740] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:30 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x7af, 0xfff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c090b, 0x80, [], @p_u16=&(0x7f0000000180)=0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x4, 0xb, 0x1, 0x0, 0xbeab4d7e07d3c3c9}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x7f, 0x5, 0x1ff]}, &(0x7f0000000240)=0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x33b080, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000280)) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x41}) 22:43:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:30 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x4000000, 0x0) 22:43:30 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = getpgid(0xffffffffffffffff) ptrace$getsig(0x4202, r0, 0x40000000000, &(0x7f0000000040)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x9, 0x1, 0x7, 0x2, 0x3, 0x2, 0x118, 0x40, 0x2f, 0x8000, 0x9, 0x38, 0x1, 0x8001, 0x6, 0x2e}, [{0x3, 0x3f, 0x0, 0xffffffffffffff7f, 0x3, 0x3, 0x5}], "8542d335796aa1c072694529e5ca1e540d5e0a2f80f3845fd50c771441869d1887714bb3f1a4857097c6901c69a5829b6c7c201c98", [[], [], [], [], [], [], [], []]}, 0x8ad) [ 625.826723][ T8850] atomic_op 000000002a124b74 conn xmit_atomic 00000000cd21f677 22:43:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 625.918705][ T8857] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:30 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) splice(r4, 0x0, r0, 0x0, 0x10000, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000200)={0x6, 0x0, 0x8, 0x9, 0x5}) 22:43:30 executing program 0: prlimit64(0x0, 0xd, &(0x7f0000000000)={0x10000, 0x4000000000000006}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140), 0x2de) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x7ff, 0x98f90b9675da43c1, 0x4, 0x80406006, 0x20, {0x77359400}, {0x2, 0x8, 0x3, 0x20, 0x8, 0xb3, "a0461dc0"}, 0x1000, 0x3, @offset=0x9, 0x0, 0x0, r2}) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x1, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r3) epoll_create1(0x0) 22:43:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4800, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretape'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 626.305916][ T8971] atomic_op 000000003f13d0c0 conn xmit_atomic 00000000cd21f677 22:43:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f0000001400)=""/246, 0xf6, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000040)=0x9) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r5, 0x0], 0x3}, 0x50) prlimit64(r5, 0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) epoll_create1(0x0) 22:43:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 626.467994][ T9087] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:31 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretapX'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 626.696106][ T9093] atomic_op 00000000c7428084 conn xmit_atomic 00000000cd21f677 22:43:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 626.989870][ T9241] atomic_op 00000000f83bd8d2 conn xmit_atomic 00000000cd21f677 [ 627.074477][ T9299] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:31 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3, 0x200000) mlock(&(0x7f0000ff1000/0xd000)=nil, 0xd000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000077, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xff29}, 0x40082) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6800, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:31 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x4}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000100)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_to_hsr\x00'}) epoll_create1(0x0) 22:43:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:31 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@iv={0x0, 0x117, 0x2, 0x0, "25abb3889f9a9cb0ef0b263f088f44a9e61081790fce6fe37fb43ebc2c217046c03d7f4ef886254e8212ed57f80341259caa08171cdfb1e7313815c82226544164ac6bead5a560234671f78cce7d0f016aa2c85c00f089d61a41a3be15bebcff2e886fa876683339aa68d45e96797ec0cb2bce63faf5c4afbfc54ce5fde5d86e088324906122e879efcb635e28b9"}], 0x78, 0x80}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:31 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x3fc, 0x800000}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140)="e5c65ace0e63beab19a508a4d0e07089b069b9cc9cdddbc96d4367d2b3ca9f46f2c4721e0209364da6f7f1a5ab5e9897d17bb93901263f56a2af7aace9eb2b2e02b226df4de007a9e07f7796ebfa9f9d49c36b486f773a5cfe7cae510fdef3a0a772f27e6a7ec4d5137bac8c40ebb15a4b58846758bd1817553ad1455d29c7", 0x7f, r4}, 0x68) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x0, 0xfff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r6, r7, 0x0], 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r6, r9, 0x0, 0x8, &(0x7f0000000240)='net/rpc\x00', 0xffffffffffffffff}, 0x30) ptrace$peekuser(0x3, r10, 0x7ff) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0xfffffbff, 0x2, 0x3, "1fefb134804fc9cce208e2b037b61a63bbf638cb1d6065ff386d9499cddd17c9", 0x34363248}) 22:43:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 627.469723][ T9478] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:32 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0xfffffffffffffdda) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0x1}) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:32 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7400, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:32 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x5, 0x7, 0x9}) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 627.878963][ T9609] atomic_op 0000000056343915 conn xmit_atomic 00000000cd21f677 [ 627.880767][ T9612] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 628.130494][ T9733] atomic_op 000000005d3fc056 conn xmit_atomic 00000000cd21f677 22:43:32 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280), 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) 22:43:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x1a000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:32 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r2, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bsg\x00', 0x0, 0x0) getsockname$tipc(r3, &(0x7f0000000500)=@id, &(0x7f0000000540)=0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0xd, 0x0, 0x0, 0x20000000000002d6, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x12, 0x18, 0x80, 0x4, 0x86, "8a63d55de4f7429b6e17848c0d712c474e5fb0b490d5d3afd598d34e7250498a5a7e50454cac480d139e83b360f91e4bd97468ee28835411066f7a44a7a7c4018a20915866ded1ba90f774ff728bbc4939cabc49013bf2d23b3173aab80e3485f093e87f627e16e433855b954b3fb64d56e782ff4daa416328faae56881be58fc4936b56f63d"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x3}]}, 0x120}}, 0x8000) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000000c0), 0xffffffffffffffff) epoll_create1(0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000080)) [ 628.502876][ T9852] atomic_op 00000000c72e217b conn xmit_atomic 00000000cd21f677 22:43:33 executing program 0: prlimit64(0x0, 0x5, &(0x7f0000000000), 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/116, 0x74, 0x80002040, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x47, 0x2}, 0x7) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0126cbd07220859d2e997f000000000000003e16435a81623460f7631be693a2f2b8e700a4fe8cd51fd906a9cac7734ade7650a91333a106bb7c33f297a3a197af9306c9f26c99872a4f623c6badf0e50e5f88208cf0ff4640dcab83f2ef0143fb12869c0fd23312cf1d74310f83baea27638348d24c7d408964c4950a7ede2721960d58b4eded3e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r5, 0x1e, 0xf628661fdde3e97c}, 0xc) 22:43:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$TCXONC(r1, 0x540a, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="1f1d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000540)={r6, 0xff}, &(0x7f0000000580)=0x8) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0xa10000, 0xfffffffa, 0x23c7589d, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x9b0902, 0x4, [], @string=&(0x7f0000000480)=0x2}}) ioctl$TCSBRKP(r7, 0x5425, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r9, 0xc1004111, &(0x7f00000005c0)={0x1, [0xfff, 0x8, 0x300], [{0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x6d1f, 0xfffffffa, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x2}, {0x2, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x0, 0x1}, {0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}], 0x8}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f0000000040)={0xfffff800, 0xb, 0x4, 0x1000000, 0x7ff, {0x0, 0x7530}, {0x1, 0x0, 0x0, 0x80, 0x7, 0x8, "2a6a3592"}, 0x81, 0x4, @offset=0x400, 0x0, 0x0, r12}) r14 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r14, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000006c0)={0x1, 0x6, 0x4, 0x0, 0x6, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x6, 0xf7, 0xd7, "0df38a4a"}, 0x20, 0x1, @fd=r14, 0x8, 0x0, r15}) recvmsg$can_j1939(r13, &(0x7f0000000440)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/129, 0x81}], 0x3, &(0x7f0000000400)=""/8, 0x8}, 0x2) epoll_create1(0x0) 22:43:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x40000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:33 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x3, 0x0, [], &(0x7f00000000c0)=0x7}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x03'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 628.854734][ T9973] atomic_op 000000009c0a4630 conn xmit_atomic 00000000cd21f677 22:43:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r0, 0x5, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x8, 0x7, 0x4, 0x100090010, 0xd07, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x81, 0x3, 0x2, "25d5de8d"}, 0x144, 0x3, @userptr=0x80, 0x3, 0x0, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) r5 = epoll_create1(0xc739d2f0819967c0) r6 = dup2(0xffffffffffffffff, r5) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000080)={0x5, {0x0, 0x81, 0x2, 0x8000000}, {0x8, 0x3f, 0x5, 0x800}, {0x2d2, 0xffff}}) 22:43:33 executing program 2 (fault-call:6 fault-nth:0): mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x100000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:33 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x202000, 0x41) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, 0x184) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCDISCONN(r2, 0x7439) [ 629.227534][T10099] validate_nla: 2 callbacks suppressed [ 629.227546][T10099] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:33 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\xff'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0xa00100, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 629.637704][T10218] atomic_op 00000000e3635269 conn xmit_atomic 00000000cd21f677 22:43:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x0f'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:34 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x8) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r4, r2, 0x0], 0x3}, 0x50) sched_setscheduler(0x0, 0x3, &(0x7f0000000380)=0x1) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r5, 0x0], 0x3}, 0x50) prlimit64(r5, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000080)={0x2, 0x0, {0x9, 0x8, 0x2, 0x9}}) r7 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r7) r8 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x800) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000040)) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) pause() 22:43:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\xfe'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 630.024648][T10338] atomic_op 000000007b4be193 conn xmit_atomic 00000000cd21f677 22:43:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESDEC=r6], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x7fff, 0x8, 0x9, 0x10001}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) r9 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18200, 0x2) mkdirat(r9, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8001, 0x24000) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r11, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000002c0)={r12, 0x81}, &(0x7f0000000340)=0x8) r13 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r13, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r13, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r14, 0x2, &(0x7f0000000000)={0x7ca2, 0x3}, 0x0) epoll_create1(0x0) [ 630.097266][T10364] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:34 executing program 5: r0 = mq_open(&(0x7f00000001c0)='/\x00', 0x2, 0x8, &(0x7f0000000200)={0x3, 0x6e, 0x9, 0xe120}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0x41, 0x3, 0x8000, 0x400, 0xf, "a40b066be509940abc759b2482d71df880d55e"}) r6 = accept$alg(r3, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0xac, "4c0eb1d77bcf8b935760c634198e11e3b6ad2a58fe05bd4a253fab6e6717aaf2e80f9bfa81646b699648a13894b40cdf9699f2c3ebe2268b8e72ad19abc3b0cabec141562ad872c547289feb011f511628ab50296851aca87ef39fbca1c2f0bfa4e97a6a5da3a965a4ff48a21815d237441bbbb09f93cb7d58bbaee8878f6de818f6320b933d7948deea13c1a2ba8f687cb6b51ac75775b7e13f5238ce32a11f9c5ec82c349f19e371064556"}, &(0x7f0000000240)=0xd0) r7 = open(&(0x7f0000000580)='./file0\x00', 0x121000, 0xdb8c2437d7d3c14a) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000640)={0x9, 0x6, 0x1, {0xb, @sliced={0x6, [0x1000, 0x17e, 0x4f, 0x6a3, 0x101, 0x6, 0xe1c, 0x7, 0x40, 0x3, 0x8001, 0x7, 0x0, 0x800, 0x6, 0x6f, 0x101, 0x40, 0x1000, 0x200, 0x80, 0xd8, 0x9, 0xf001, 0xe8, 0x4, 0x9, 0x4, 0x6, 0x8, 0x3, 0x3, 0x8, 0x7fff, 0x7, 0xfc01, 0x7ff, 0x5, 0x95, 0x200, 0x101, 0xf83d, 0x3, 0x8, 0x8, 0x7, 0x1, 0x7], 0x9}}, 0x2}) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x106, &(0x7f0000000480)=[@iv={0x0, 0x117, 0x2, 0x0, "0a8db473558e0eecbbdebd509129b49bbda7075947d3104c07cde59c83c5a010bd71fd2b768000e99c7f1515da2e1d63cdcee0e14c4094b8160e79052792e0b0d3da926a424117c316b52b56d3c4426c85e76375ef165410a77b710c6ef182785b2bb4bdf02d3622d2ef862fdd384ad6efff082bcbf5c383c49cd2277fe3761d95dc77fc51768424760cc5f66c6933fa04a298a5b0626939db9d1f527b89560eacb84070b13c5a55d251326c77a8e580bbfc05538a2622dd389279"}], 0x15}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={r12}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000400)={0xbd, 0x7, 0x3da1, 0xb30e, r12}, &(0x7f0000000440)=0x10) getsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000100), &(0x7f0000000140)=0x4) splice(r6, 0x0, r2, 0x0, 0x10000, 0x0) 22:43:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$fb(r2, &(0x7f0000000080)="33cd16050cff5cc8e44a60a92b5e2dc13714bdc864c6837d98431b471e0316a5be1f9384c74f078826b8966a5291380e391028945de9a84482d3b92ec8092178ddfb00dc42e246177296437ebad7d303e10943c0c8b3d4ea98b01f72bd1934c6e231d4b2b64b76da7eff06394f1f71", 0x6f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="ab553fec94248c32e27d04000000288a27c5d53f4b0f7252a0727d4a93fbcd72525025f34cf0731855f592b9a28ea079c812fcd2a6e02bd42e49ae8ad857ae397bcd0097b85e93294dcf8ee4f215136e10672e465337abf1a9d9b8336365e352145054fd6d02c1b131de3135f26b5699ae077c152711b8b866a2b051e0cd05bd7cf9070000002d977e00e542eb72e31697c77d226cefda66b61accd38bd67bf91ced3d883f6871e8dc44b8b69ce92b", 0xaf) socket$caif_stream(0x25, 0x1, 0x3) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) [ 630.286320][T10451] atomic_op 000000001c5e067a conn xmit_atomic 00000000cd21f677 [ 630.363784][T10485] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:35 executing program 0: prlimit64(0x0, 0x1, &(0x7f0000000000)={0x200000000}, 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x18}}, @in6={0xa, 0x4e24, 0x5, @empty, 0xffffffc3}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffff801, @remote, 0x9cc5}], 0xa4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x7fffffff) 22:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\xff'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 630.596650][T10565] atomic_op 0000000066148f32 conn xmit_atomic 00000000cd21f677 22:43:35 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000004c0)={r4, 0x200}, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x130, "7766f5878778a07adfa33f2b4273"}, &(0x7f0000000140)=0x16) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={r9, 0x1f, 0x801}, 0x11) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r11 = fcntl$dupfd(r10, 0x0, r5) r12 = perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x70, 0x0, 0xff, 0x80, 0xe3, 0x0, 0x6d, 0x6020, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x202, 0x0, 0xfffffffe, 0x8, 0x5, 0x7ff, 0x20}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000480)={0xf000000, 0x4, 0x6, r12, 0x0, &(0x7f00000003c0)={0x990a6c, 0x7fffffff, [], @p_u16=&(0x7f0000000240)}}) r13 = accept$alg(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) sendmsg$alg(r13, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r13, 0x0, r6, 0x0, 0x10000, 0x0) 22:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:35 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x5, 0x1}) [ 631.030164][T10691] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 631.054040][T10694] atomic_op 00000000ef7d11db conn xmit_atomic 00000000cd21f677 22:43:35 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x400, 0x5}, 0x0) epoll_create1(0x0) 22:43:35 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffff) epoll_create1(0x0) 22:43:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:35 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x3, 0x5, 0x4, 0x2000, 0x1, {}, {0x5, 0xf, 0x2, 0x7, 0xdd, 0xc9, "2a536ec0"}, 0x4, 0x4, @userptr=0x800, 0x1, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f800000023464f61747f6af03414d3b6d5e8e8ea12f4a555ce97a0d96303bb4adc760a4a342f506d92b93e6a44a88c0a6d90d8f7", @ANYRES16=0x0, @ANYBLOB="140029bd7000fcdbdf250f000000200003001400020076657468305f746f5f68737200000000080005000000000014000200080003000200000008000600090000000800060007000000080006000400000030000100080002000000000014000300fe80000000000000000000000000001d0800060072720000080002002b000000700003000800040006000000140002006272696467655f736c6176655f300000080001000400000014000600abf62be8293444fa4be563b3c32c304108000300040000000800030004000000080001000200000008000500ac141425140002006272696467655f736c6176655f300000"], 0xf8}, 0x1, 0x0, 0x0, 0x24008004}, 0xa042) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000180)="4f3d0100fdec6189855de1a1588217b341a024fe68fc9a9e681da2d13cd37896295fdf528d6be17994c12e9e9b402b71ead10d5b025c420d2c932c1ff0b282e3186c4274b405bd864a897ae2ac0fe20ba7322cfa906914b881af179c4dbd", 0x5e}], 0x1, 0xfc) r7 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x2, 0x0, 0x10000, 0x42}) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000140)={r8, 0x20}) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000580)={0x1, 'veth1_to_bond\x00', {}, 0xdb}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r9}, 0x8) 22:43:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:35 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x82, 0x4, 0x6}, 0x8}}, 0x18) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0xf9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}) close(r2) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) 22:43:36 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xc, 0x200) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/pfkey\x00', 0x438500, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xfffffffd, 0x404f06]) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x80, 0x4) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x218, &(0x7f00000001c0)=ANY=[@ANYBLOB="58000000000017010000020000003d0000007cccabdd65a83e797b07c57859d5e51f3d4540b670a0c24ecaf2b107d1dc17f2e66c4be5559368efbb2810a96ecc9d8ceb4a1f099f976c217501a2097900000000000000"], 0x58}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000, 0x0) 22:43:36 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x4, 0x4, 0x101, 0x4, 0x3, 0x0, 0xe0a, 0x6, 0xffffff7f}, 0x0) epoll_create1(0x0) [ 631.422767][T10830] atomic_op 00000000544c7ce4 conn xmit_atomic 00000000cd21f677 [ 631.437380][T10835] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:36 executing program 0: r0 = getpgrp(0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d00001500000000000000000000000100180000003c02080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000005000000000000000a0000000000000000000000000000000000ffbfac14140000000000000000000500"/142], 0xa8}}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x7a16f347, 0x13, 0x4, 0x2000, 0xfffff90f, {0x0, 0x2710}, {0x5, 0x8, 0x9, 0xfe, 0x7, 0x0, "bd38d7ca"}, 0x80000001, 0x1, @planes=&(0x7f0000000000)={0x2, 0x9e3, @mem_offset=0x3, 0x80bc}, 0x401, 0x0, r2}) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000100)={0x6, 0x3}) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000000000)=""/105) semtimedop(r4, &(0x7f0000000180)=[{0x6, 0xbc87, 0x1000}, {0x6, 0x80, 0x800}, {0x4, 0x0, 0xb393712c44e8a51d}, {0x3, 0x7, 0x1000}, {0x1, 0x1, 0x800}, {0x2, 0x4, 0x800}, {0x2, 0x0, 0x1800}], 0x7, &(0x7f00000001c0)={0x77359400}) prlimit64(r0, 0xb, &(0x7f0000000040), 0x0) epoll_create1(0x0) 22:43:36 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x8, 0x12) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 631.782814][T10965] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:36 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r4, 0x3ff}, 0x8) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r8 = dup2(r5, r7) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$IOC_PR_REGISTER(r10, 0x401870c8, &(0x7f0000000040)={0x101, 0x3}) [ 632.063724][T11071] atomic_op 00000000d4f502f4 conn xmit_atomic 00000000cd21f677 [ 632.076673][T11074] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:36 executing program 1: prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) epoll_create1(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x100, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0x80002007}) chown(&(0x7f0000000140)='./file0\x00', r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r4 = getegid() chown(&(0x7f0000000140)='./file0\x00', r3, r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) chown(&(0x7f0000000140)='./file0\x00', r7, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c6d61785f7265616492307830308b55b052985c30303030303030303000303030", @ANYRESDEC=r6, @ANYBLOB=',euid<', @ANYRESDEC=r7, @ANYBLOB=',\x00']) 22:43:36 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="18117b0f0000000000002a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000140)=0x8) r8 = dup2(r3, r3) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x40, 0x62}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4, 0x1}, 0x10) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:36 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000200)='\x00', &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 632.329730][T11190] atomic_op 00000000f1ee1b84 conn xmit_atomic 00000000cd21f677 [ 632.391936][T11213] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:37 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000100)={0xc000000, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000040), {0x29}, &(0x7f0000002600)=""/240, 0x35b, &(0x7f0000001600)=""/4087, &(0x7f00000002c0)=[r2, r3, 0x0]}, 0x50) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x11}, &(0x7f0000001400)=""/217, 0xd9, &(0x7f0000000380)=""/4091, &(0x7f00000002c0)=[r0, r3, 0x0], 0x3}, 0x50) prlimit64(r1, 0x1a, &(0x7f0000000000)={0x0, 0x2}, 0x0) epoll_create1(0x0) 22:43:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:37 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x401000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) dup(r1) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) epoll_create1(0x0) 22:43:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 632.671675][T11313] atomic_op 0000000097e56a41 conn xmit_atomic 00000000cd21f677 22:43:37 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4400, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:37 executing program 0: prlimit64(0x0, 0xa0b539223c0d2270, &(0x7f0000000000)={0x400000000000}, 0x0) epoll_create1(0x0) [ 632.798625][T11371] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1, 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffb4) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in6=@ipv4={[], [], @loopback}, 0x4e23, 0x1, 0x4e24, 0x401, 0xa, 0xc0, 0xa0, 0x2c, r4, r5}, {0x21c, 0x1, 0x2, 0xffff, 0x5, 0x7fff, 0xfffffffffffff000, 0x3}, {0x4, 0x1, 0xfff, 0x100}, 0xff, 0x6e6bb8, 0x2, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4, 0x32}, 0xa, @in6=@local, 0x3501, 0x1, 0x0, 0x9, 0x5, 0x80000000, 0xffffffff}}, 0xe8) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x206) [ 633.058951][T11435] atomic_op 000000009fcd22d6 conn xmit_atomic 00000000cd21f677 22:43:38 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xc00) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20000000) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) 22:43:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:38 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r1) epoll_create1(0x0) ftruncate(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:38 executing program 1: epoll_create1(0x0) 22:43:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) r2 = dup2(r0, r1) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) 22:43:38 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$inet(0x2, 0x2, 0x4) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 633.589908][T11557] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:38 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 22:43:38 executing program 0 (fault-call:6 fault-nth:0): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:38 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000400080229bd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40004000) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 634.001493][T11777] FAULT_INJECTION: forcing a failure. [ 634.001493][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 634.023342][T11777] CPU: 1 PID: 11777 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 634.032149][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.042205][T11777] Call Trace: [ 634.042230][T11777] dump_stack+0x197/0x210 [ 634.042250][T11777] should_fail.cold+0xa/0x15 [ 634.042269][T11777] ? fault_create_debugfs_attr+0x180/0x180 [ 634.042291][T11777] ? ___might_sleep+0x163/0x2c0 [ 634.042311][T11777] __should_failslab+0x121/0x190 [ 634.042329][T11777] should_failslab+0x9/0x14 [ 634.042347][T11777] __kmalloc+0x2e0/0x770 [ 634.049968][T11777] ? af_alg_wait_for_wmem+0x520/0x520 [ 634.084437][T11777] ? lock_sock_nested+0x9a/0x120 [ 634.089387][T11777] ? sock_kmalloc+0xc6/0x120 [ 634.093998][T11777] sock_kmalloc+0xc6/0x120 [ 634.098438][T11777] af_alg_alloc_areq+0x24/0x1e0 [ 634.103303][T11777] aead_recvmsg+0x45d/0x17c0 [ 634.103335][T11777] ? aead_bind+0x170/0x170 [ 634.103352][T11777] ? apparmor_socket_recvmsg+0x2a/0x30 [ 634.103371][T11777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.103389][T11777] ? security_socket_recvmsg+0x95/0xc0 [ 634.103405][T11777] ? aead_bind+0x170/0x170 [ 634.103424][T11777] sock_recvmsg+0xce/0x110 [ 634.103442][T11777] sock_read_iter+0x2f8/0x420 [ 634.103465][T11777] ? sock_recvmsg+0x110/0x110 [ 634.112664][T11777] ? lock_acquire+0x190/0x410 [ 634.153022][T11777] ? pipe_lock+0x65/0x80 [ 634.157281][T11777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 634.163012][T11777] ? iov_iter_pipe+0xfe/0x2b0 [ 634.168489][T11777] generic_file_splice_read+0x4af/0x800 [ 634.174052][T11777] ? add_to_pipe+0x3b0/0x3b0 [ 634.178674][T11777] ? security_file_permission+0x8f/0x380 [ 634.184327][T11777] sock_splice_read+0xf6/0x140 [ 634.189275][T11777] ? rw_verify_area+0x126/0x360 [ 634.194146][T11777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 634.199966][T11777] ? kernel_sock_shutdown+0x70/0x70 [ 634.205174][T11777] do_splice_to+0x127/0x180 [ 634.209687][T11777] do_splice+0x1309/0x1680 [ 634.214120][T11777] ? ksys_dup3+0x3e0/0x3e0 [ 634.218580][T11777] ? opipe_prep.part.0+0x300/0x300 [ 634.223881][T11777] ? __fget_light+0x1a9/0x230 [ 634.228581][T11777] __x64_sys_splice+0x2c6/0x330 [ 634.233456][T11777] do_syscall_64+0xfa/0x790 [ 634.238111][T11777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.244013][T11777] RIP: 0033:0x45a919 [ 634.247922][T11777] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 634.267540][T11777] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 634.275957][T11777] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 634.283937][T11777] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 634.291923][T11777] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 22:43:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0x7, &(0x7f0000000000)={0x5}, 0x0) epoll_create1(0x0) 22:43:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 634.299906][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 634.307890][T11777] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:38 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x800000000080002, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0xfffffe66, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000019008306f5c840e12296105d0100000008000300060000000000200000b1f70a35f811eeb6eda34fb01811c6fa478e836090c43ad3a38f116bad74d8fc11a8ae340e3bad0b043adf11871d244c9179654fb61285919c8af704b6290000000000"], 0x28}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x49248e4, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) splice(r8, 0x0, r1, 0x0, 0x7, 0x0) 22:43:38 executing program 0 (fault-call:6 fault-nth:1): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 634.503172][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 634.518207][T11873] FAULT_INJECTION: forcing a failure. [ 634.518207][T11873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.561636][T11921] validate_nla: 1 callbacks suppressed [ 634.561648][T11921] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 634.592340][T11873] CPU: 0 PID: 11873 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 634.601248][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.611544][T11873] Call Trace: [ 634.614984][T11873] dump_stack+0x197/0x210 [ 634.619341][T11873] should_fail.cold+0xa/0x15 [ 634.623964][T11873] ? fault_create_debugfs_attr+0x180/0x180 [ 634.629953][T11873] ? ___might_sleep+0x163/0x2c0 [ 634.634838][T11873] should_fail_alloc_page+0x50/0x60 [ 634.640053][T11873] __alloc_pages_nodemask+0x1a1/0x910 [ 634.645444][T11873] ? stack_trace_save+0xac/0xe0 [ 634.650319][T11873] ? __alloc_pages_slowpath+0x2920/0x2920 [ 634.656095][T11873] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 634.662355][T11873] alloc_pages_current+0x107/0x210 [ 634.667478][T11873] ? sock_read_iter+0x2f8/0x420 [ 634.672866][T11873] push_pipe+0x2ae/0x6a0 [ 634.677124][T11873] iov_iter_get_pages+0x6f9/0x11c8 [ 634.682236][T11873] ? csum_and_copy_to_iter+0x15d0/0x15d0 [ 634.682252][T11873] ? __kasan_check_read+0x11/0x20 [ 634.682272][T11873] af_alg_make_sg+0x9d/0x460 [ 634.682293][T11873] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 634.703611][T11873] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 634.709713][T11873] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 634.715574][T11873] ? af_alg_release+0x120/0x120 [ 634.720442][T11873] ? __kmalloc+0x608/0x770 [ 634.725141][T11873] af_alg_get_rsgl+0x1f4/0x6b0 [ 634.729937][T11873] aead_recvmsg+0x4b6/0x17c0 [ 634.734567][T11873] ? aead_bind+0x170/0x170 [ 634.739016][T11873] ? apparmor_socket_recvmsg+0x2a/0x30 [ 634.744491][T11873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.750752][T11873] ? security_socket_recvmsg+0x95/0xc0 [ 634.756226][T11873] ? aead_bind+0x170/0x170 [ 634.760682][T11873] sock_recvmsg+0xce/0x110 [ 634.765142][T11873] sock_read_iter+0x2f8/0x420 [ 634.769828][T11873] ? sock_recvmsg+0x110/0x110 [ 634.774522][T11873] ? lock_acquire+0x190/0x410 [ 634.774537][T11873] ? pipe_lock+0x65/0x80 [ 634.774553][T11873] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 634.774566][T11873] ? iov_iter_pipe+0xfe/0x2b0 [ 634.774586][T11873] generic_file_splice_read+0x4af/0x800 [ 634.799425][T11873] ? add_to_pipe+0x3b0/0x3b0 [ 634.804055][T11873] ? security_file_permission+0x8f/0x380 22:43:39 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x400}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000040)={r4, 0x10001}) r5 = dup2(r1, r1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r8, 0x6, 0x4, [0x86ae, 0x6, 0x7fff, 0x4]}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:39 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x40002004}) r2 = open(&(0x7f0000000300)='.\x00', 0x400400, 0x63) mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) 22:43:39 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0xaad27c5f223ce9d0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x166) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r3, 0x0], 0x3}, 0x50) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xff) clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r1, 0x1, 0x9ce8850c285d5ae5, &(0x7f0000000040)={0x77359400}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000080)={0x1d, @local, 0x4e22, 0x4, 'sed\x00', 0x8, 0x8, 0x22}, 0x2c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x200800, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) [ 634.809709][T11873] sock_splice_read+0xf6/0x140 [ 634.814663][T11873] ? rw_verify_area+0x126/0x360 [ 634.819532][T11873] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 634.825266][T11873] ? kernel_sock_shutdown+0x70/0x70 [ 634.830506][T11873] do_splice_to+0x127/0x180 [ 634.835063][T11873] do_splice+0x1309/0x1680 [ 634.839505][T11873] ? ksys_dup3+0x3e0/0x3e0 [ 634.843941][T11873] ? opipe_prep.part.0+0x300/0x300 [ 634.849075][T11873] ? __fget_light+0x1a9/0x230 [ 634.853774][T11873] __x64_sys_splice+0x2c6/0x330 [ 634.858855][T11873] do_syscall_64+0xfa/0x790 [ 634.863643][T11873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.869528][T11873] RIP: 0033:0x45a919 [ 634.873520][T11873] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 634.893138][T11873] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 634.901573][T11873] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 22:43:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 634.910086][T11873] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 634.918156][T11873] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 634.926222][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 634.934730][T11873] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:39 executing program 0 (fault-call:6 fault-nth:2): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 635.045190][T11947] FAULT_INJECTION: forcing a failure. [ 635.045190][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 635.059808][T11947] CPU: 1 PID: 11947 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 635.068518][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.079208][T11947] Call Trace: [ 635.082541][T11947] dump_stack+0x197/0x210 [ 635.086899][T11947] should_fail.cold+0xa/0x15 [ 635.091603][T11947] ? fault_create_debugfs_attr+0x180/0x180 [ 635.097428][T11947] ? ___might_sleep+0x163/0x2c0 [ 635.102305][T11947] __should_failslab+0x121/0x190 [ 635.107261][T11947] should_failslab+0x9/0x14 [ 635.111768][T11947] __kmalloc+0x2e0/0x770 [ 635.116087][T11947] ? af_alg_wait_for_wmem+0x520/0x520 [ 635.121685][T11947] ? __kasan_check_write+0x14/0x20 [ 635.126795][T11947] ? sock_kmalloc+0xc6/0x120 [ 635.131373][T11947] sock_kmalloc+0xc6/0x120 [ 635.135793][T11947] af_alg_alloc_areq+0x24/0x1e0 [ 635.140757][T11947] aead_recvmsg+0x45d/0x17c0 [ 635.145374][T11947] ? aead_bind+0x170/0x170 [ 635.149808][T11947] ? apparmor_socket_recvmsg+0x2a/0x30 [ 635.155462][T11947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.161903][T11947] ? security_socket_recvmsg+0x95/0xc0 [ 635.167386][T11947] ? aead_bind+0x170/0x170 [ 635.171795][T11947] sock_recvmsg+0xce/0x110 [ 635.176303][T11947] sock_read_iter+0x2f8/0x420 [ 635.181147][T11947] ? sock_recvmsg+0x110/0x110 [ 635.185911][T11947] ? lock_acquire+0x190/0x410 [ 635.190610][T11947] ? pipe_lock+0x65/0x80 [ 635.194863][T11947] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.200709][T11947] ? iov_iter_pipe+0xfe/0x2b0 [ 635.205393][T11947] generic_file_splice_read+0x4af/0x800 [ 635.210951][T11947] ? add_to_pipe+0x3b0/0x3b0 [ 635.215569][T11947] ? security_file_permission+0x8f/0x380 [ 635.223097][T11947] sock_splice_read+0xf6/0x140 [ 635.228023][T11947] ? rw_verify_area+0x126/0x360 [ 635.233118][T11947] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.238954][T11947] ? kernel_sock_shutdown+0x70/0x70 [ 635.244269][T11947] do_splice_to+0x127/0x180 [ 635.248958][T11947] do_splice+0x1309/0x1680 [ 635.253414][T11947] ? ksys_dup3+0x3e0/0x3e0 [ 635.257838][T11947] ? opipe_prep.part.0+0x300/0x300 [ 635.263221][T11947] ? __fget_light+0x1a9/0x230 [ 635.267973][T11947] __x64_sys_splice+0x2c6/0x330 [ 635.273399][T11947] do_syscall_64+0xfa/0x790 [ 635.277976][T11947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.284143][T11947] RIP: 0033:0x45a919 [ 635.288153][T11947] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.308031][T11947] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 635.316529][T11947] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 635.324642][T11947] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 635.332639][T11947] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 22:43:39 executing program 0 (fault-call:6 fault-nth:3): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 635.340711][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 635.348682][T11947] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:40 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 635.471116][T12053] FAULT_INJECTION: forcing a failure. [ 635.471116][T12053] name failslab, interval 1, probability 0, space 0, times 0 [ 635.547704][T12055] rds_sendmsg: 3 callbacks suppressed [ 635.547769][T12055] atomic_op 0000000047c746ec conn xmit_atomic 00000000cd21f677 [ 635.564464][T12057] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 635.589969][T12053] CPU: 0 PID: 12053 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 635.598907][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.608978][T12053] Call Trace: [ 635.612498][T12053] dump_stack+0x197/0x210 [ 635.616868][T12053] should_fail.cold+0xa/0x15 [ 635.621678][T12053] ? fault_create_debugfs_attr+0x180/0x180 [ 635.627603][T12053] ? ___might_sleep+0x163/0x2c0 [ 635.632520][T12053] __should_failslab+0x121/0x190 [ 635.637492][T12053] should_failslab+0x9/0x14 [ 635.642049][T12053] __kmalloc+0x2e0/0x770 [ 635.646324][T12053] ? af_alg_wait_for_wmem+0x520/0x520 [ 635.651712][T12053] ? __kasan_check_write+0x14/0x20 [ 635.656842][T12053] ? sock_kmalloc+0xc6/0x120 [ 635.661454][T12053] sock_kmalloc+0xc6/0x120 [ 635.665961][T12053] af_alg_alloc_areq+0x24/0x1e0 [ 635.671100][T12053] aead_recvmsg+0x45d/0x17c0 [ 635.676079][T12053] ? aead_bind+0x170/0x170 [ 635.680523][T12053] ? apparmor_socket_recvmsg+0x2a/0x30 [ 635.686267][T12053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.692558][T12053] ? security_socket_recvmsg+0x95/0xc0 [ 635.698054][T12053] ? aead_bind+0x170/0x170 [ 635.702496][T12053] sock_recvmsg+0xce/0x110 [ 635.706949][T12053] sock_read_iter+0x2f8/0x420 [ 635.711652][T12053] ? sock_recvmsg+0x110/0x110 [ 635.717216][T12053] ? lock_acquire+0x190/0x410 [ 635.722109][T12053] ? pipe_lock+0x65/0x80 [ 635.726379][T12053] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.732120][T12053] ? iov_iter_pipe+0xfe/0x2b0 [ 635.736820][T12053] generic_file_splice_read+0x4af/0x800 [ 635.742600][T12053] ? add_to_pipe+0x3b0/0x3b0 [ 635.748186][T12053] ? security_file_permission+0x8f/0x380 [ 635.754334][T12053] sock_splice_read+0xf6/0x140 [ 635.759144][T12053] ? rw_verify_area+0x126/0x360 [ 635.764047][T12053] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.775497][T12053] ? kernel_sock_shutdown+0x70/0x70 [ 635.780715][T12053] do_splice_to+0x127/0x180 [ 635.785236][T12053] do_splice+0x1309/0x1680 [ 635.789665][T12053] ? ksys_dup3+0x3e0/0x3e0 [ 635.794091][T12053] ? opipe_prep.part.0+0x300/0x300 [ 635.799194][T12053] ? __fget_light+0x1a9/0x230 [ 635.803871][T12053] __x64_sys_splice+0x2c6/0x330 [ 635.808724][T12053] do_syscall_64+0xfa/0x790 [ 635.813224][T12053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.819105][T12053] RIP: 0033:0x45a919 [ 635.822997][T12053] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.842611][T12053] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 635.851057][T12053] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 635.859141][T12053] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 635.867106][T12053] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 635.875069][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 635.883044][T12053] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffd44, &(0x7f0000000300)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "a4117c0b14c742e2c2cc4b9d65de2d30184222ad01005de213228d34738c0a0be790cc8e0cb90602cdf3f1815c3fc45772a56a32b76d2efa6f8d5199b6b4ca8ce32438c2caab94532ff34f2133ac0a748fb0e628e3568049607310827354a373fea0b582d0ad71e86285020f2f7108ea2d63f12e00764a94c487884bad015623b92d7ada4f84de0722c6f983b618445c95761d3482d85ecd309ff1b3430eb21dbd0192b57cf5ee5ae444e0cdd47d30933c34d11baec311714164ffba38e272d7c90cceb81f9abdbe3424f1a9fa9e7739482884350102da902f8de3d7c5990b90227b0e99e8d6571903"}, @assoc={0x0, 0x117, 0x4, 0x9}], 0x0, 0x8004}, 0x40000) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:40 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x8, 0x40}) 22:43:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:40 executing program 0 (fault-call:6 fault-nth:4): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 636.078621][T12176] atomic_op 0000000056343915 conn xmit_atomic 00000000cd21f677 22:43:40 executing program 1: epoll_create1(0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 22:43:40 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') close(r0) epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x295, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0x23c}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5}]}, 0xa8}}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 636.143841][T12183] FAULT_INJECTION: forcing a failure. [ 636.143841][T12183] name failslab, interval 1, probability 0, space 0, times 0 [ 636.227856][T12183] CPU: 0 PID: 12183 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 636.229744][T12247] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 636.237630][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.237638][T12183] Call Trace: [ 636.237662][T12183] dump_stack+0x197/0x210 [ 636.237682][T12183] should_fail.cold+0xa/0x15 [ 636.237704][T12183] ? fault_create_debugfs_attr+0x180/0x180 22:43:40 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x42}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0x3, 0x33363248, 0x100, 0xe0b3, 0x3, @discrete={0xfffffcf0, 0x5}}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x1, 0x2}, 0x10) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 636.275481][T12183] ? ___might_sleep+0x163/0x2c0 [ 636.280357][T12183] __should_failslab+0x121/0x190 [ 636.285304][T12183] should_failslab+0x9/0x14 [ 636.289990][T12183] __kmalloc+0x2e0/0x770 [ 636.294248][T12183] ? af_alg_wait_for_wmem+0x520/0x520 [ 636.299635][T12183] ? __kasan_check_write+0x14/0x20 [ 636.304777][T12183] ? sock_kmalloc+0xc6/0x120 [ 636.309414][T12183] sock_kmalloc+0xc6/0x120 [ 636.313847][T12183] af_alg_alloc_areq+0x24/0x1e0 [ 636.318758][T12183] aead_recvmsg+0x45d/0x17c0 [ 636.323381][T12183] ? aead_bind+0x170/0x170 [ 636.327836][T12183] ? apparmor_socket_recvmsg+0x2a/0x30 [ 636.333336][T12183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.339855][T12183] ? security_socket_recvmsg+0x95/0xc0 [ 636.345333][T12183] ? aead_bind+0x170/0x170 [ 636.349765][T12183] sock_recvmsg+0xce/0x110 [ 636.354282][T12183] sock_read_iter+0x2f8/0x420 [ 636.358980][T12183] ? sock_recvmsg+0x110/0x110 [ 636.363770][T12183] ? lock_acquire+0x190/0x410 [ 636.368544][T12183] ? pipe_lock+0x65/0x80 [ 636.372908][T12183] ? __sanitizer_cov_trace_cmp4+0x16/0x20 22:43:40 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r0, 0xf, &(0x7f0000000000), 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$KDDISABIO(r2, 0x4b37) capset(&(0x7f00000000c0)={0x400e204c, r0}, &(0x7f0000000100)={0x1, 0x3, 0x5d, 0x1, 0x5, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$char_usb(r2, &(0x7f0000000040)="c8adb746d99f97856b883363f10e90a19d310521fff6ff2935accce2a850478500e5eb0db7e6eadfa9301629cc9be7f2615f7b3af4b50cd465ca033d38f9", 0x3e) [ 636.378647][T12183] ? iov_iter_pipe+0xfe/0x2b0 [ 636.383380][T12183] generic_file_splice_read+0x4af/0x800 [ 636.389001][T12183] ? add_to_pipe+0x3b0/0x3b0 [ 636.393676][T12183] ? security_file_permission+0x8f/0x380 [ 636.399535][T12183] sock_splice_read+0xf6/0x140 [ 636.404417][T12183] ? rw_verify_area+0x126/0x360 [ 636.409594][T12183] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 636.415522][T12183] ? kernel_sock_shutdown+0x70/0x70 [ 636.420751][T12183] do_splice_to+0x127/0x180 [ 636.425527][T12183] do_splice+0x1309/0x1680 [ 636.425546][T12183] ? ksys_dup3+0x3e0/0x3e0 [ 636.425563][T12183] ? opipe_prep.part.0+0x300/0x300 [ 636.425580][T12183] ? __fget_light+0x1a9/0x230 [ 636.425598][T12183] __x64_sys_splice+0x2c6/0x330 [ 636.425621][T12183] do_syscall_64+0xfa/0x790 [ 636.453572][T12183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.459484][T12183] RIP: 0033:0x45a919 [ 636.464011][T12183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 636.483912][T12183] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 636.492338][T12183] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 636.500511][T12183] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 636.508491][T12183] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 636.516599][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 22:43:41 executing program 0 (fault-call:6 fault-nth:5): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 636.524582][T12183] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 636.616638][T12312] FAULT_INJECTION: forcing a failure. [ 636.616638][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 636.638212][T12312] CPU: 1 PID: 12312 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 636.646930][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.657195][T12312] Call Trace: [ 636.660511][T12312] dump_stack+0x197/0x210 [ 636.664923][T12312] should_fail.cold+0xa/0x15 [ 636.669542][T12312] ? fault_create_debugfs_attr+0x180/0x180 [ 636.675372][T12312] ? ___might_sleep+0x163/0x2c0 [ 636.680247][T12312] __should_failslab+0x121/0x190 [ 636.685206][T12312] should_failslab+0x9/0x14 [ 636.689730][T12312] __kmalloc+0x2e0/0x770 [ 636.694017][T12312] ? af_alg_wait_for_wmem+0x520/0x520 [ 636.699410][T12312] ? __kasan_check_write+0x14/0x20 [ 636.704545][T12312] ? sock_kmalloc+0xc6/0x120 [ 636.709154][T12312] sock_kmalloc+0xc6/0x120 [ 636.713594][T12312] af_alg_alloc_areq+0x24/0x1e0 [ 636.718462][T12312] aead_recvmsg+0x45d/0x17c0 [ 636.723172][T12312] ? aead_bind+0x170/0x170 [ 636.727778][T12312] ? apparmor_socket_recvmsg+0x2a/0x30 [ 636.733339][T12312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 636.739623][T12312] ? security_socket_recvmsg+0x95/0xc0 [ 636.745098][T12312] ? aead_bind+0x170/0x170 [ 636.749544][T12312] sock_recvmsg+0xce/0x110 [ 636.753976][T12312] sock_read_iter+0x2f8/0x420 [ 636.758697][T12312] ? sock_recvmsg+0x110/0x110 [ 636.763407][T12312] ? lock_acquire+0x190/0x410 [ 636.768097][T12312] ? pipe_lock+0x65/0x80 [ 636.772350][T12312] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 636.778083][T12312] ? iov_iter_pipe+0xfe/0x2b0 [ 636.782915][T12312] generic_file_splice_read+0x4af/0x800 [ 636.788986][T12312] ? add_to_pipe+0x3b0/0x3b0 [ 636.794116][T12312] ? security_file_permission+0x8f/0x380 [ 636.799934][T12312] sock_splice_read+0xf6/0x140 [ 636.804703][T12312] ? rw_verify_area+0x126/0x360 [ 636.809558][T12312] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 636.815426][T12312] ? kernel_sock_shutdown+0x70/0x70 [ 636.820625][T12312] do_splice_to+0x127/0x180 [ 636.825136][T12312] do_splice+0x1309/0x1680 [ 636.829560][T12312] ? ksys_dup3+0x3e0/0x3e0 [ 636.833998][T12312] ? opipe_prep.part.0+0x300/0x300 [ 636.839121][T12312] ? __fget_light+0x1a9/0x230 [ 636.843802][T12312] __x64_sys_splice+0x2c6/0x330 [ 636.848682][T12312] do_syscall_64+0xfa/0x790 [ 636.853191][T12312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 636.859086][T12312] RIP: 0033:0x45a919 [ 636.862981][T12312] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 636.883068][T12312] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 636.891504][T12312] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 636.899483][T12312] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 636.907497][T12312] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 636.915495][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 636.923551][T12312] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:41 executing program 0 (fault-call:6 fault-nth:6): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:41 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) epoll_create1(0x0) 22:43:41 executing program 2: mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r2, r3, 0x0], 0x3}, 0x50) sched_setscheduler(r2, 0x1, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r5) epoll_create1(0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:41 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0x1f, 0x6, 0x5, 0x3, 0x3e, 0x20, 0x3d, 0x40, 0x297, 0x4, 0x2, 0x38, 0x1, 0x1, 0x9, 0x7}, [{0x60000000, 0x5, 0x800, 0xf, 0x7fff, 0x7fffffff, 0x1, 0xaae}], "b94115cce4b6fe2f55215b9ad3575f3925a4438c300f0dad8fc1bae2f9af6baa29d8ecf84f5407b2fa4ad5d654e41686b3b8d6", [[], [], [], [], []]}, 0x5ab) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r4 = accept$alg(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r4, 0x0, r1, 0x0, 0x10000, 0x0) 22:43:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) [ 637.160701][T12427] FAULT_INJECTION: forcing a failure. [ 637.160701][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 637.170321][T12435] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:41 executing program 1: prlimit64(0x0, 0x5, &(0x7f0000000000)={0x0, 0x44}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='vxcan1\x00', 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x4e20, @multicast1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000180)={0x4, 0xcc0, 0x0, r2, 0x0, &(0x7f0000000140)={0x9c090b, 0x6, [], @value64=0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000280)={0x8, 0x3, 0x2, 0x8001, &(0x7f00000001c0)=[{}, {}, {}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) epoll_create1(0x0) [ 637.203368][T12431] atomic_op 00000000ac4f593a conn xmit_atomic 00000000cd21f677 [ 637.293803][T12427] CPU: 1 PID: 12427 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 637.302972][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.313049][T12427] Call Trace: [ 637.316447][T12427] dump_stack+0x197/0x210 [ 637.320805][T12427] should_fail.cold+0xa/0x15 [ 637.325531][T12427] ? fault_create_debugfs_attr+0x180/0x180 [ 637.331377][T12427] ? ___might_sleep+0x163/0x2c0 [ 637.336349][T12427] __should_failslab+0x121/0x190 [ 637.341421][T12427] should_failslab+0x9/0x14 [ 637.345936][T12427] __kmalloc+0x2e0/0x770 [ 637.350201][T12427] ? af_alg_wait_for_wmem+0x520/0x520 [ 637.355590][T12427] ? __kasan_check_write+0x14/0x20 [ 637.361065][T12427] ? sock_kmalloc+0xc6/0x120 [ 637.366106][T12427] sock_kmalloc+0xc6/0x120 [ 637.370896][T12427] af_alg_alloc_areq+0x24/0x1e0 [ 637.375764][T12427] aead_recvmsg+0x45d/0x17c0 [ 637.380395][T12427] ? aead_bind+0x170/0x170 [ 637.384843][T12427] ? apparmor_socket_recvmsg+0x2a/0x30 [ 637.390325][T12427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 637.396643][T12427] ? security_socket_recvmsg+0x95/0xc0 [ 637.402127][T12427] ? aead_bind+0x170/0x170 [ 637.406652][T12427] sock_recvmsg+0xce/0x110 [ 637.411086][T12427] sock_read_iter+0x2f8/0x420 [ 637.415787][T12427] ? sock_recvmsg+0x110/0x110 [ 637.420492][T12427] ? lock_acquire+0x190/0x410 [ 637.425200][T12427] ? pipe_lock+0x65/0x80 [ 637.429464][T12427] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 637.435195][T12427] ? iov_iter_pipe+0xfe/0x2b0 [ 637.439913][T12427] generic_file_splice_read+0x4af/0x800 [ 637.445492][T12427] ? add_to_pipe+0x3b0/0x3b0 [ 637.450298][T12427] ? security_file_permission+0x8f/0x380 [ 637.455945][T12427] sock_splice_read+0xf6/0x140 [ 637.460874][T12427] ? rw_verify_area+0x126/0x360 [ 637.465754][T12427] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 637.471490][T12427] ? kernel_sock_shutdown+0x70/0x70 [ 637.476709][T12427] do_splice_to+0x127/0x180 [ 637.481256][T12427] do_splice+0x1309/0x1680 [ 637.485698][T12427] ? ksys_dup3+0x3e0/0x3e0 [ 637.490128][T12427] ? opipe_prep.part.0+0x300/0x300 [ 637.495238][T12427] ? __fget_light+0x1a9/0x230 [ 637.495256][T12427] __x64_sys_splice+0x2c6/0x330 [ 637.495279][T12427] do_syscall_64+0xfa/0x790 [ 637.495304][T12427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.495316][T12427] RIP: 0033:0x45a919 [ 637.495335][T12427] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:43:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 637.540039][T12427] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 637.548494][T12427] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 637.556923][T12427] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 637.564928][T12427] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 637.572936][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 637.580947][T12427] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:42 executing program 0 (fault-call:6 fault-nth:7): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 637.665547][T12549] atomic_op 00000000af89471f conn xmit_atomic 00000000cd21f677 22:43:42 executing program 1: prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x6, 0x5}, 0x0) epoll_create1(0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x0) [ 637.868694][T12658] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 637.874218][T12654] FAULT_INJECTION: forcing a failure. [ 637.874218][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 637.924713][T12654] CPU: 1 PID: 12654 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 637.933453][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.943518][T12654] Call Trace: [ 637.946828][T12654] dump_stack+0x197/0x210 [ 637.951184][T12654] should_fail.cold+0xa/0x15 [ 637.955830][T12654] ? fault_create_debugfs_attr+0x180/0x180 [ 637.961660][T12654] ? ___might_sleep+0x163/0x2c0 [ 637.966543][T12654] __should_failslab+0x121/0x190 [ 637.971508][T12654] should_failslab+0x9/0x14 [ 637.976111][T12654] __kmalloc+0x2e0/0x770 [ 637.980379][T12654] ? af_alg_wait_for_wmem+0x520/0x520 [ 637.985774][T12654] ? __kasan_check_write+0x14/0x20 [ 637.990917][T12654] ? sock_kmalloc+0xc6/0x120 [ 637.995537][T12654] sock_kmalloc+0xc6/0x120 [ 638.001107][T12654] af_alg_alloc_areq+0x24/0x1e0 [ 638.005990][T12654] aead_recvmsg+0x45d/0x17c0 [ 638.011595][T12654] ? aead_bind+0x170/0x170 [ 638.016026][T12654] ? apparmor_socket_recvmsg+0x2a/0x30 [ 638.021518][T12654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.027773][T12654] ? security_socket_recvmsg+0x95/0xc0 [ 638.034244][T12654] ? aead_bind+0x170/0x170 [ 638.038667][T12654] sock_recvmsg+0xce/0x110 [ 638.043084][T12654] sock_read_iter+0x2f8/0x420 [ 638.043101][T12654] ? sock_recvmsg+0x110/0x110 [ 638.043123][T12654] ? lock_acquire+0x190/0x410 [ 638.043138][T12654] ? pipe_lock+0x65/0x80 [ 638.043155][T12654] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 638.043170][T12654] ? iov_iter_pipe+0xfe/0x2b0 22:43:42 executing program 1: getpgid(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r0, r1, 0x0], 0x3}, 0x50) prlimit64(r1, 0x8, &(0x7f0000000000)={0x800000000000}, 0x0) epoll_create1(0x0) 22:43:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0xa0010000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 638.043190][T12654] generic_file_splice_read+0x4af/0x800 [ 638.043213][T12654] ? add_to_pipe+0x3b0/0x3b0 [ 638.073427][T12654] ? security_file_permission+0x8f/0x380 [ 638.073451][T12654] sock_splice_read+0xf6/0x140 [ 638.073467][T12654] ? rw_verify_area+0x126/0x360 [ 638.073483][T12654] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 638.073495][T12654] ? kernel_sock_shutdown+0x70/0x70 [ 638.073513][T12654] do_splice_to+0x127/0x180 [ 638.073529][T12654] do_splice+0x1309/0x1680 [ 638.073549][T12654] ? ksys_dup3+0x3e0/0x3e0 [ 638.073567][T12654] ? opipe_prep.part.0+0x300/0x300 [ 638.073584][T12654] ? __fget_light+0x1a9/0x230 [ 638.073603][T12654] __x64_sys_splice+0x2c6/0x330 [ 638.104776][T12654] do_syscall_64+0xfa/0x790 [ 638.104801][T12654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.104814][T12654] RIP: 0033:0x45a919 [ 638.104831][T12654] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:43:42 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffffffffffde, &(0x7f0000000300)=[@iv={0x0, 0x117, 0x2, 0x0, "b9d1e3cb8780401b7c6e756c678da61345c0c07c72f76da4867ee13d8b965fe9cac3c823db98fe79ce60e52d64af48140a2b67a710a96129e1c129c05a8792136d7a82581104e7d986389fefd9957d78d2b30c171d2dd027ab2dd3ad32"}, @op, @op={0x0, 0x117, 0x3, 0x2}, @assoc, @op, @iv={0x0, 0x117, 0x2, 0x0, "c47bcbd327d08477f1ac5b61a0f38d9842a69efd3e694dc600b198d5cf706e39b1183c3811b73d2cb20f3a75fa06865193c46d3f27d0bbfe85c6ce7e0a416128c138c04e9dec6bcd876468"}, @op={0x0, 0x117, 0x3, 0x2}, @iv={0x0, 0x117, 0x2, 0x0, "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"}], 0xfffffe6e}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x7, 0x2, 0xff, 0x9, 0x2, 0x3e, 0x1, 0x1f, 0x4, 0x1, 0x7, 0x2, 0x20, 0x1}, 0xe) [ 638.104840][T12654] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.104856][T12654] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 638.104865][T12654] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 638.104874][T12654] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 638.104882][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 638.104890][T12654] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:42 executing program 0 (fault-call:6 fault-nth:8): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 638.401578][T12779] FAULT_INJECTION: forcing a failure. [ 638.401578][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 638.496780][T12779] CPU: 0 PID: 12779 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 638.506011][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.516257][T12779] Call Trace: [ 638.519579][T12779] dump_stack+0x197/0x210 [ 638.523945][T12779] should_fail.cold+0xa/0x15 [ 638.528675][T12779] ? fault_create_debugfs_attr+0x180/0x180 [ 638.534519][T12779] ? ___might_sleep+0x163/0x2c0 [ 638.539447][T12779] __should_failslab+0x121/0x190 [ 638.544421][T12779] should_failslab+0x9/0x14 [ 638.548959][T12779] __kmalloc+0x2e0/0x770 [ 638.553231][T12779] ? af_alg_wait_for_wmem+0x520/0x520 [ 638.553254][T12779] ? __kasan_check_write+0x14/0x20 [ 638.553276][T12779] ? sock_kmalloc+0xc6/0x120 [ 638.563762][T12779] sock_kmalloc+0xc6/0x120 [ 638.563784][T12779] af_alg_alloc_areq+0x24/0x1e0 [ 638.563805][T12779] aead_recvmsg+0x45d/0x17c0 [ 638.582278][T12779] ? aead_bind+0x170/0x170 [ 638.586720][T12779] ? apparmor_socket_recvmsg+0x2a/0x30 [ 638.592383][T12779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.598651][T12779] ? security_socket_recvmsg+0x95/0xc0 [ 638.604104][T12779] ? aead_bind+0x170/0x170 [ 638.608509][T12779] sock_recvmsg+0xce/0x110 [ 638.612940][T12779] sock_read_iter+0x2f8/0x420 [ 638.617615][T12779] ? sock_recvmsg+0x110/0x110 [ 638.622299][T12779] ? lock_acquire+0x190/0x410 [ 638.627409][T12779] ? pipe_lock+0x65/0x80 [ 638.631649][T12779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 638.637711][T12779] ? iov_iter_pipe+0xfe/0x2b0 [ 638.642390][T12779] generic_file_splice_read+0x4af/0x800 [ 638.647934][T12779] ? add_to_pipe+0x3b0/0x3b0 [ 638.652521][T12779] ? security_file_permission+0x8f/0x380 [ 638.658271][T12779] sock_splice_read+0xf6/0x140 [ 638.663136][T12779] ? rw_verify_area+0x126/0x360 [ 638.667985][T12779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 638.673709][T12779] ? kernel_sock_shutdown+0x70/0x70 [ 638.678906][T12779] do_splice_to+0x127/0x180 [ 638.683413][T12779] do_splice+0x1309/0x1680 [ 638.687850][T12779] ? ksys_dup3+0x3e0/0x3e0 [ 638.692268][T12779] ? opipe_prep.part.0+0x300/0x300 [ 638.697379][T12779] ? __fget_light+0x1a9/0x230 [ 638.702054][T12779] __x64_sys_splice+0x2c6/0x330 [ 638.706917][T12779] do_syscall_64+0xfa/0x790 [ 638.711422][T12779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.717297][T12779] RIP: 0033:0x45a919 [ 638.721188][T12779] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:43:43 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x1ff, 0x4) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 22:43:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r4, 0x0, r0, 0x0, 0x10000, 0x0) 22:43:43 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newaddr={0x20, 0x14, 0x802, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x424ebac2bc350337, r1}, [@IFA_FLAGS={0x8, 0x8, 0x71d}]}, 0x20}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000001380)={0xc000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/232, 0xe8, &(0x7f0000000380)=""/4096, &(0x7f00000002c0)=[r3, r4, 0x0], 0x3}, 0x50) sendfile(r2, r5, &(0x7f0000001400), 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r6, @ANYBLOB="020225bd7000fbdbdf250500000018000200080001000008000008000100eadd0000040004001c00090008000100fbffffff08000100090000000800020009000000a80004004400070008000400020000000800040002000000080001001b0000000800010019000000080001000300000008000400feffffff080003002000000008000300ff0300000c00010073797a31000000001400010062726f6164636173742d6c696e6b00002c0007000800040000000000080004000600000008000400e2465a79080003000600000008000300040000001400010062726f6164636173742d6c696e6b0000180007000c0003007f0000000000000008000200020000002000060004000200040002000800010054070000040002000400020004000200"], 0x128}, 0x1, 0x0, 0x0, 0x8055}, 0x1) [ 638.740880][T12779] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.750926][T12779] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 638.759847][T12779] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 638.768006][T12779] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 638.775980][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 638.783943][T12779] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:43 executing program 0 (fault-call:6 fault-nth:9): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 638.830657][T12785] atomic_op 00000000def6388f conn xmit_atomic 00000000cd21f677 [ 638.857899][T12794] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 638.938765][T12847] FAULT_INJECTION: forcing a failure. [ 638.938765][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 638.968092][T12847] CPU: 0 PID: 12847 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 638.976845][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.987066][T12847] Call Trace: [ 638.990368][T12847] dump_stack+0x197/0x210 [ 638.994718][T12847] should_fail.cold+0xa/0x15 [ 638.999444][T12847] ? fault_create_debugfs_attr+0x180/0x180 [ 639.005287][T12847] ? ___might_sleep+0x163/0x2c0 [ 639.010185][T12847] __should_failslab+0x121/0x190 [ 639.015295][T12847] should_failslab+0x9/0x14 [ 639.019864][T12847] __kmalloc+0x2e0/0x770 [ 639.024203][T12847] ? af_alg_wait_for_wmem+0x520/0x520 [ 639.029592][T12847] ? __kasan_check_write+0x14/0x20 [ 639.034810][T12847] ? sock_kmalloc+0xc6/0x120 [ 639.039464][T12847] sock_kmalloc+0xc6/0x120 [ 639.043905][T12847] af_alg_alloc_areq+0x24/0x1e0 [ 639.048869][T12847] aead_recvmsg+0x45d/0x17c0 [ 639.053466][T12847] ? aead_bind+0x170/0x170 [ 639.057874][T12847] ? apparmor_socket_recvmsg+0x2a/0x30 [ 639.063326][T12847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.069561][T12847] ? security_socket_recvmsg+0x95/0xc0 [ 639.075017][T12847] ? aead_bind+0x170/0x170 [ 639.079434][T12847] sock_recvmsg+0xce/0x110 [ 639.083950][T12847] sock_read_iter+0x2f8/0x420 [ 639.089707][T12847] ? sock_recvmsg+0x110/0x110 [ 639.094389][T12847] ? lock_acquire+0x190/0x410 [ 639.099069][T12847] ? pipe_lock+0x65/0x80 [ 639.103302][T12847] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 639.109007][T12847] ? iov_iter_pipe+0xfe/0x2b0 [ 639.113682][T12847] generic_file_splice_read+0x4af/0x800 [ 639.119486][T12847] ? add_to_pipe+0x3b0/0x3b0 [ 639.124263][T12847] ? security_file_permission+0x8f/0x380 [ 639.129913][T12847] sock_splice_read+0xf6/0x140 [ 639.134691][T12847] ? rw_verify_area+0x126/0x360 [ 639.139542][T12847] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 639.145256][T12847] ? kernel_sock_shutdown+0x70/0x70 [ 639.150443][T12847] do_splice_to+0x127/0x180 [ 639.154950][T12847] do_splice+0x1309/0x1680 [ 639.159460][T12847] ? ksys_dup3+0x3e0/0x3e0 [ 639.163999][T12847] ? opipe_prep.part.0+0x300/0x300 [ 639.169106][T12847] ? __fget_light+0x1a9/0x230 [ 639.174127][T12847] __x64_sys_splice+0x2c6/0x330 [ 639.179003][T12847] do_syscall_64+0xfa/0x790 [ 639.183507][T12847] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.189396][T12847] RIP: 0033:0x45a919 [ 639.194332][T12847] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 639.213948][T12847] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 639.222366][T12847] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 639.230367][T12847] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 22:43:43 executing program 0 (fault-call:6 fault-nth:10): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000, 0x0) [ 639.238332][T12847] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 639.246385][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 639.254413][T12847] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 22:43:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) 22:43:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x20}]]}}}]}, 0x3c}}, 0x0) 22:43:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{}, "af8f1e13359bb0d5", "b9ce9df905b68b5c76f40bc122252d04", "ff6cfceb", "8b17d63c4c81266e"}, 0x28) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x101000, 0x0) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r6, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r9 = accept$alg(r1, 0x0, 0x0) gettid() sendmsg$alg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r9, 0x0, r0, 0x0, 0x10000, 0x0) [ 639.399415][T12912] FAULT_INJECTION: forcing a failure. [ 639.399415][T12912] name failslab, interval 1, probability 0, space 0, times 0 22:43:44 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) epoll_create1(0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000000c0)={{0x1, 0x6, 0x40, 0x2, 0x2}, 0xf55}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0b000082d75d6fac793995d0a4b4d1"], &(0x7f0000000080)=0x13) 22:43:44 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1f) r0 = io_uring_setup(0xf9, &(0x7f0000000100)) close(r0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 639.460236][T12914] atomic_op 000000001a102a48 conn xmit_atomic 00000000cd21f677 [ 639.521251][T12912] CPU: 1 PID: 12912 Comm: syz-executor.0 Not tainted 5.5.0-rc3-syzkaller #0 [ 639.529984][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.540227][T12912] Call Trace: [ 639.543539][T12912] dump_stack+0x197/0x210 [ 639.547913][T12912] should_fail.cold+0xa/0x15 [ 639.552531][T12912] ? fault_create_debugfs_attr+0x180/0x180 [ 639.558449][T12912] ? ___might_sleep+0x163/0x2c0 [ 639.563327][T12912] __should_failslab+0x121/0x190 [ 639.568293][T12912] should_failslab+0x9/0x14 [ 639.572765][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 639.572814][T12912] __kmalloc+0x2e0/0x770 [ 639.588332][T12912] ? af_alg_wait_for_wmem+0x520/0x520 [ 639.593694][T12912] ? __kasan_check_write+0x14/0x20 [ 639.598967][T12912] ? sock_kmalloc+0xc6/0x120 [ 639.603546][T12912] sock_kmalloc+0xc6/0x120 [ 639.608209][T12912] af_alg_alloc_areq+0x24/0x1e0 [ 639.613494][T12912] aead_recvmsg+0x45d/0x17c0 [ 639.618108][T12912] ? aead_bind+0x170/0x170 [ 639.622656][T12912] ? apparmor_socket_recvmsg+0x2a/0x30 [ 639.628650][T12912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 639.634889][T12912] ? security_socket_recvmsg+0x95/0xc0 [ 639.640429][T12912] ? aead_bind+0x170/0x170 [ 639.644854][T12912] sock_recvmsg+0xce/0x110 [ 639.649260][T12912] sock_read_iter+0x2f8/0x420 [ 639.653924][T12912] ? sock_recvmsg+0x110/0x110 [ 639.658619][T12912] ? lock_acquire+0x190/0x410 [ 639.663282][T12912] ? pipe_lock+0x65/0x80 [ 639.667512][T12912] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 639.673213][T12912] ? iov_iter_pipe+0xfe/0x2b0 [ 639.677879][T12912] generic_file_splice_read+0x4af/0x800 [ 639.683414][T12912] ? add_to_pipe+0x3b0/0x3b0 [ 639.688003][T12912] ? security_file_permission+0x8f/0x380 [ 639.693632][T12912] sock_splice_read+0xf6/0x140 [ 639.698391][T12912] ? rw_verify_area+0x126/0x360 [ 639.703231][T12912] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 639.708943][T12912] ? kernel_sock_shutdown+0x70/0x70 [ 639.714155][T12912] do_splice_to+0x127/0x180 [ 639.719615][T12912] do_splice+0x1309/0x1680 [ 639.724029][T12912] ? ksys_dup3+0x3e0/0x3e0 [ 639.728433][T12912] ? opipe_prep.part.0+0x300/0x300 [ 639.733538][T12912] ? __fget_light+0x1a9/0x230 [ 639.738379][T12912] __x64_sys_splice+0x2c6/0x330 [ 639.743221][T12912] do_syscall_64+0xfa/0x790 [ 639.747715][T12912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 639.753591][T12912] RIP: 0033:0x45a919 [ 639.757486][T12912] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 639.777076][T12912] RSP: 002b:00007f1385629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 639.785472][T12912] RAX: ffffffffffffffda RBX: 00007f1385629c90 RCX: 000000000045a919 [ 639.793700][T12912] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 639.802542][T12912] RBP: 000000000075bf20 R08: 0000000000010000 R09: 0000000000000000 [ 639.810613][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f138562a6d4 [ 639.818571][T12912] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 [ 639.833415][T12921] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:43:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@mask_fadd={0x58, 0x114, 0x9, {{}, &(0x7f0000000180), 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x27}}], 0x58}, 0x0) [ 639.922792][ T238] kasan: CONFIG_KASAN_INLINE enabled [ 639.928923][T16403] kasan: CONFIG_KASAN_INLINE enabled [ 639.929762][ T238] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 639.929786][ T238] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 639.929802][ T238] CPU: 1 PID: 238 Comm: kworker/u4:3 Not tainted 5.5.0-rc3-syzkaller #0 [ 639.929810][ T238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.929834][ T238] Workqueue: pencrypt_parallel padata_parallel_worker [ 639.935124][T16403] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 639.943159][ T238] RIP: 0010:gcmaes_crypt_by_sg.constprop.0+0x1035/0x1aa0 [ 639.943173][ T238] Code: e8 10 4f 53 02 48 89 84 24 a8 00 00 00 48 83 c0 08 48 89 c2 48 89 84 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 30 09 00 00 48 8b 84 24 a8 00 [ 639.943186][ T238] RSP: 0018:ffffc900012a7750 EFLAGS: 00010202 [ 640.017846][ T238] RAX: dffffc0000000000 RBX: 0000000000004000 RCX: ffffffff838d26a9 [ 640.025805][ T238] RDX: 0000000000000001 RSI: ffffffff838d26fb RDI: 0000000000000007 [ 640.033761][ T238] RBP: ffffc900012a7b20 R08: ffff8880a8f50140 R09: 000000000000000d [ 640.041717][ T238] R10: ffff88808f190660 R11: 00000000000000d0 R12: 0000000000004000 [ 640.049673][ T238] R13: 0000000000000000 R14: ffff88808f190300 R15: 0000000000004000 [ 640.057830][ T238] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 640.066780][ T238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.073348][ T238] CR2: 00007ffd1139c938 CR3: 0000000094adc000 CR4: 00000000001406e0 [ 640.081301][ T238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.089276][ T238] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 640.097497][ T238] Call Trace: [ 640.100875][ T238] ? common_rfc4106_set_key+0x180/0x180 [ 640.106587][ T238] ? unwind_dump+0x100/0x100 [ 640.111156][ T238] ? profile_setup.cold+0xbb/0xbb [ 640.116158][ T238] ? unwind_next_frame+0x3b/0x50 [ 640.121095][ T238] ? print_circular_bug.isra.0+0x230/0x230 [ 640.126876][ T238] ? save_trace+0x3e/0x8c0 [ 640.131271][ T238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 640.137591][ T238] ? find_first_zero_bit+0x9a/0xc0 [ 640.142698][ T238] ? __lock_acquire+0x29c9/0x4a00 [ 640.147708][ T238] generic_gcmaes_encrypt+0x10d/0x160 [ 640.153175][ T238] ? helper_rfc4106_encrypt+0x390/0x390 [ 640.158731][ T238] ? padata_parallel_worker+0x1a3/0x470 [ 640.164372][ T238] crypto_aead_encrypt+0xaf/0xf0 [ 640.169390][ T238] simd_aead_encrypt+0x1a6/0x2b0 [ 640.175702][ T238] crypto_aead_encrypt+0xaf/0xf0 [ 640.180622][ T238] pcrypt_aead_enc+0x19/0x80 [ 640.185215][ T238] padata_parallel_worker+0x28f/0x470 [ 640.190565][ T238] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 640.197558][ T238] ? invoke_padata_reorder+0x40/0x40 [ 640.202839][ T238] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 640.208391][ T238] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 640.214368][ T238] ? trace_hardirqs_on+0x67/0x240 [ 640.219390][ T238] process_one_work+0x9af/0x1740 [ 640.224309][ T238] ? pwq_dec_nr_in_flight+0x320/0x320 [ 640.229726][ T238] ? lock_acquire+0x190/0x410 [ 640.234816][ T238] worker_thread+0x98/0xe40 [ 640.239331][ T238] kthread+0x361/0x430 [ 640.243485][ T238] ? process_one_work+0x1740/0x1740 [ 640.248688][ T238] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 640.254408][ T238] ret_from_fork+0x24/0x30 [ 640.258810][ T238] Modules linked in: [ 640.262875][T16403] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 640.262915][ T238] ---[ end trace dd8fd9063d9168a0 ]--- [ 640.270675][T16403] CPU: 0 PID: 16403 Comm: kworker/u4:10 Tainted: G D 5.5.0-rc3-syzkaller #0 [ 640.276336][ T238] RIP: 0010:gcmaes_crypt_by_sg.constprop.0+0x1035/0x1aa0 [ 640.286261][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.286279][T16403] Workqueue: pencrypt_parallel padata_parallel_worker [ 640.293310][ T238] Code: e8 10 4f 53 02 48 89 84 24 a8 00 00 00 48 83 c0 08 48 89 c2 48 89 84 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 30 09 00 00 48 8b 84 24 a8 00 [ 640.303355][T16403] RIP: 0010:gcmaes_crypt_by_sg.constprop.0+0x1035/0x1aa0 [ 640.303373][T16403] Code: e8 10 4f 53 02 48 89 84 24 a8 00 00 00 48 83 c0 08 48 89 c2 48 89 84 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 30 09 00 00 48 8b 84 24 a8 00 [ 640.310122][ T238] RSP: 0018:ffffc900012a7750 EFLAGS: 00010202 [ 640.329909][T16403] RSP: 0018:ffffc900061ef750 EFLAGS: 00010202 [ 640.329921][T16403] RAX: dffffc0000000000 RBX: 0000000000004000 RCX: ffffffff838d26a9 [ 640.329927][T16403] RDX: 0000000000000001 RSI: ffffffff838d26fb RDI: 0000000000000007 [ 640.329934][T16403] RBP: ffffc900061efb20 R08: ffff888050cb21c0 R09: 000000000000000d [ 640.329940][T16403] R10: ffff8880926c2660 R11: 00000000000000d0 R12: 0000000000004000 [ 640.329957][T16403] R13: 0000000000000000 R14: ffff8880926c2300 R15: 0000000000004000 [ 640.337011][ T238] RAX: dffffc0000000000 RBX: 0000000000004000 RCX: ffffffff838d26a9 [ 640.356679][T16403] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 640.356687][T16403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.356694][T16403] CR2: 0000001b2c427000 CR3: 00000000a7cfe000 CR4: 00000000001406f0 [ 640.356710][T16403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.363029][ T238] RDX: 0000000000000001 RSI: ffffffff838d26fb RDI: 0000000000000007 [ 640.369065][T16403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 640.377044][ T238] RBP: ffffc900012a7b20 R08: ffff8880a8f50140 R09: 000000000000000d [ 640.386481][T16403] Call Trace: [ 640.386519][T16403] ? common_rfc4106_set_key+0x180/0x180 [ 640.386541][T16403] ? unwind_next_frame.part.0+0x1a9/0xa20 [ 640.394519][ T238] R10: ffff88808f190660 R11: 00000000000000d0 R12: 0000000000004000 [ 640.402810][T16403] ? unwind_dump+0x100/0x100 [ 640.402830][T16403] ? unwind_dump+0x100/0x100 [ 640.410863][ T238] R13: 0000000000000000 R14: ffff88808f190300 R15: 0000000000004000 [ 640.418845][T16403] ? stack_trace_save+0xac/0xe0 [ 640.418863][T16403] ? __kasan_check_read+0x11/0x20 [ 640.427775][ T238] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 640.435181][T16403] ? mark_lock+0xc2/0x1220 [ 640.435194][T16403] ? __kasan_check_read+0x11/0x20 [ 640.435205][T16403] ? __kasan_check_read+0x11/0x20 [ 640.435223][T16403] ? mark_lock+0xc2/0x1220 [ 640.443231][ T238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.451192][T16403] ? __kasan_check_read+0x11/0x20 [ 640.459326][ T238] CR2: 00007ffd1139c938 CR3: 0000000094adc000 CR4: 00000000001406e0 [ 640.467278][T16403] ? __kasan_check_read+0x11/0x20 [ 640.467297][T16403] ? __lock_acquire+0x16f2/0x4a00 [ 640.475261][ T238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.478612][T16403] generic_gcmaes_encrypt+0x10d/0x160 [ 640.484145][ T238] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 640.489842][T16403] ? helper_rfc4106_encrypt+0x390/0x390 [ 640.497797][ T238] Kernel panic - not syncing: Fatal exception in interrupt [ 640.502359][T16403] ? padata_parallel_worker+0x1a3/0x470 [ 640.622034][T16403] crypto_aead_encrypt+0xaf/0xf0 [ 640.626961][T16403] simd_aead_encrypt+0x1a6/0x2b0 [ 640.631991][T16403] crypto_aead_encrypt+0xaf/0xf0 [ 640.636920][T16403] pcrypt_aead_enc+0x19/0x80 [ 640.641496][T16403] padata_parallel_worker+0x28f/0x470 [ 640.646859][T16403] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 640.653084][T16403] ? invoke_padata_reorder+0x40/0x40 [ 640.658354][T16403] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 640.663902][T16403] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 640.669866][T16403] ? trace_hardirqs_on+0x67/0x240 [ 640.675311][T16403] process_one_work+0x9af/0x1740 [ 640.680235][T16403] ? pwq_dec_nr_in_flight+0x320/0x320 [ 640.685606][T16403] ? lock_acquire+0x190/0x410 [ 640.690290][T16403] worker_thread+0x98/0xe40 [ 640.694802][T16403] kthread+0x361/0x430 [ 640.698877][T16403] ? process_one_work+0x1740/0x1740 [ 640.704087][T16403] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 640.709804][T16403] ret_from_fork+0x24/0x30 [ 640.714219][T16403] Modules linked in: [ 640.720404][ T238] Kernel Offset: disabled [ 640.725105][ T238] Rebooting in 86400 seconds..