0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents(r3, &(0x7f0000001600)=""/62, 0x3e) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 618.820077][ T29] audit: type=1800 audit(1594052780.094:539): pid=28645 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16383 res=0 16:26:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x8c2cc755a6, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:20 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x28000085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0f0000000000870a0000000000000801030006516dc4b727e040eb95c5d7e48cad720ec351474ed27816f42c975ee9cc7f3c7777eab9fcaae11ca494732fb0898608ae1fc260d359c3ab43ce1d1e49cf743adc0aa25edd79c4adf3bfaa9272341de657f74b194c8d93e4e78d273ec4d5552843fe5c8ab2abd1131e445c1f13d4f25342ebe9c9ccbfd3b90f6091775a1caa65463772f501d18bcc10bfebe52805288db732baed98f3fdf1076d179305b9ae41390e07c34ef1289ddb7dceafac8894e8dc", @ANYRES32=r5, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) 16:26:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c6c) close(r0) 16:26:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x7ffffffff000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24002790c901a8e0f5d37848550000", @ANYRES16=r4, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000080)={'team0\x00', @ifru_mtu=0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffea1, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_vlan\x00', 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:26:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 16:26:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 619.353398][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 619.353407][ T29] audit: type=1800 audit(1594052780.724:542): pid=28730 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15993 res=0 16:26:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) 16:26:20 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe1d5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffe60) 16:26:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x8}, 0x4) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x7) 16:26:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x4000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 619.481493][ T29] audit: type=1800 audit(1594052780.774:543): pid=28707 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 16:26:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x5000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x44642, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) accept4$nfc_llcp(r5, 0x0, &(0x7f0000000180), 0x0) sendfile(r0, r2, 0x0, 0x200fff) 16:26:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xf0ff7f00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e1f, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="86000000c3f3fb0438f23a68de6413ea0fa7d93384892731093facdda7104ca9281bd0448825fdb85a078fe1f2164bf681668ee915c84ceb088b83607f1589b50a4d7495843b03bba417c7a1b64f48d4cbb1bce2e8b524e558b4aa06d050f98c2f07876d2ec155d4fdfe955b3b22cc3cb2f3ce2be7213370a8", @ANYRES32=r3, @ANYBLOB="070000000000000000000f00000000000600", @ANYRES32=0x0, @ANYBLOB="05003300001e1a319b62d4e66da0b2a03a9155aba5ec862ced22e9ac855cb04ce6c1d3f7a2e06ae44908e9725ca4c138b09115"], 0x24}}, 0x44001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x4004080) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 620.084095][ T29] audit: type=1800 audit(1594052781.445:544): pid=28784 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16042 res=0 [ 620.139069][ T29] audit: type=1800 audit(1594052781.475:545): pid=28766 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16027 res=0 [ 620.340610][ T29] audit: type=1800 audit(1594052781.695:546): pid=28779 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16040 res=0 16:26:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000019600, 0x0) 16:26:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xf0ffffff7f0000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x7f, 0x7, 0x0, 'queue1\x00', 0x1000}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:21 executing program 4: mkdir(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 16:26:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) close(r1) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000280)={0x6b884340, 0x0, [], {0x0, @reserved}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)={0xfffffffffffffffa, 0xd0}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x100000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:22 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe1d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffe60) 16:26:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x200000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 620.969046][ T29] audit: type=1800 audit(1594052782.325:547): pid=28811 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16044 res=0 16:26:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x60900, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x50000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xd0, @fixed={[], 0x10}, 0x1, 0x1}, 0xe) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x0, 0x0}) 16:26:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x0, {0x0, 0xf0, 0x1}, {0x3, 0xff, 0x5}, 0xff, 0x2}, {0x0, 0x2, {0x2, 0xff, 0x2068ab4387075a43}, {0x4ea3717281c65727, 0xf0, 0x1}, 0xff, 0xfe}, {0x2, 0x2, {0x0, 0x85164030309c2909}, {0x1, 0xf0, 0x1}, 0x1}], 0x60) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6(0xa, 0xa, 0x1c010) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) 16:26:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x300000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r4, r2, r1, r6], 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x400000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000008c0)="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", 0x4d9, r0) [ 621.642906][ T29] audit: type=1800 audit(1594052783.005:548): pid=28856 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16042 res=0 16:26:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x500000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000100)=0xffff) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.apparmor\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 622.084698][ T29] audit: type=1800 audit(1594052783.446:549): pid=28857 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16044 res=0 [ 622.410750][ T29] audit: type=1800 audit(1594052783.776:550): pid=28882 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16008 res=0 16:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 16:26:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x0, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 16:26:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x600000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, 0x0, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:23 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84c30b31040037bbb3e7e5224dc209a000413c50ddf6450a537ee0af66ce12bb29e16f87d11e0e810a31442f7b1bd880537da50ce625d3376cc672cf6f0b21977b0000000000000000000000000000728915504db39317f7199d102da4de", @ANYRES16=r4, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00ddff", @ANYRES16=r5, @ANYBLOB="000129bd7000fbdbdf25050000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r6, 0x2008002) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'veth1_to_bridge\x00', 0x1}, 0x18) 16:26:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x700000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 622.526505][T28908] netlink: 'syz-executor.3': attribute type 22 has an invalid length. 16:26:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f"], 0x8c}}, 0x0) 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x800000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 622.648424][T28954] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 622.672861][ T29] audit: type=1800 audit(1594052784.036:551): pid=28949 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16010 res=0 16:26:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x900000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 622.723175][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 16:26:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x2}, 0x4410, 0x40000000000, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xfeb3) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000040)=""/32, 0x0) sendmsg$AUDIT_TTY_SET(r1, 0x0, 0x0) ftruncate(r1, 0x80006) sendfile(r0, r1, 0x0, 0x8000fffffffe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x35) 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xa00000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x6, 0x0, 0x5, 0x0, 0x2, 0x81, 0x6, 0x2, 0x5, 0xce, 0x81, 0xf6, 0x0, 0x9, 0x8, 0x4, 0x7, 0x6b, 0xda, [], 0x4, 0x3}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) write$capi20_data(0xffffffffffffffff, &(0x7f0000000280)={{0x10, 0x4, 0x86, 0x83, 0x3, 0x3f}, 0xf6, "0b1b4867428db1766464f62941dc5ae6b737ad84696a8e4fb6f1b0a0508213a6d274866a4754a8a2a0faaf94ebc5bd8b5244af38e31f251f4ae246ceeb6f9e8deb7adbc7135e7a47d5c8e624ae40c054c89e1ba39eafa73e0b5b0c85322d8965549daf6dc9fb66ddde99d07b63827e7498a5190d08505aa048073702715a2a50219c2eeb6c3f1d950b8add6a12351e6fb97110f933ba3eeb70f1451d892323568a0f2d4c600b6f12dd39cde750df0cd97bf2190f30f943eca3c537b7e2efcd5b4a3ed68e63d31dc709f057b837850665221c76bd49b85d963ae855c58e8fc9ccf280d4b469ba840da0184f4f7304f1b94c64103d984b"}, 0x108) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x40) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) setxattr$security_smack_transmute(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0xcbc4c433182503a9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 622.936806][T28961] device bond1 entered promiscuous mode [ 622.969945][T28961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.010324][T28992] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 623.033035][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xf00000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 623.082628][T29044] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. 16:26:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_adjtime(0xffc99a3b, &(0x7f00000003c0)) 16:26:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, 0x0, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x1802000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x16}]}}}]}, 0x3c}}, 0x0) 16:26:24 executing program 0: [ 623.373976][T29058] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 16:26:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x2000000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:24 executing program 0: 16:26:24 executing program 4: 16:26:25 executing program 3: 16:26:25 executing program 4: 16:26:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x3f00000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:25 executing program 0: 16:26:25 executing program 0: 16:26:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, 0x0, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:25 executing program 3: 16:26:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x3f5c13e600000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:25 executing program 4: 16:26:25 executing program 0: 16:26:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:25 executing program 3: 16:26:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x4000000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:25 executing program 4: 16:26:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:26:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x4102000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:25 executing program 3: 16:26:25 executing program 4: [ 624.411317][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 624.462071][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.503926][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:26:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x439577e300000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:25 executing program 3: 16:26:25 executing program 4: 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 3: 16:26:26 executing program 4: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x5400000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 624.658922][T29147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:26:26 executing program 4: [ 624.734757][T29147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.772500][T29147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:26:26 executing program 0: 16:26:26 executing program 3: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x5800000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 4: 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r3, 0x313}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x8dffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 4: 16:26:26 executing program 3: 16:26:26 executing program 0: 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r3, 0x313}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 4: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x91ffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r3, 0x313}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 3: 16:26:26 executing program 0: 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 4: 16:26:26 executing program 3: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xa655c72c8c000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 0: 16:26:26 executing program 3: 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 4: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xb804000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:26 executing program 3: 16:26:26 executing program 4: 16:26:26 executing program 0: 16:26:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xc4ff000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:26 executing program 4: 16:26:26 executing program 0: 16:26:27 executing program 3: 16:26:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xc4ffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:27 executing program 4: 16:26:27 executing program 0: 16:26:27 executing program 3: 16:26:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:27 executing program 4: 16:26:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xe02e000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:27 executing program 3: 16:26:27 executing program 0: 16:26:27 executing program 0: 16:26:27 executing program 4: 16:26:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xe0ffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}]}, 0x98}}, 0x0) [ 626.445803][T29236] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x3c) 16:26:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) 16:26:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xe803000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 626.576788][T29249] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:28 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050f05008d"]}) 16:26:28 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) [ 626.678666][T29260] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:28 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xf401000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:28 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xf5ffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:28 executing program 0: add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) syz_read_part_table(0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a100000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) 16:26:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0x2, 0x0) 16:26:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000880)='/dev/nullb0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x1) 16:26:28 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xfc00000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:28 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@generic={0xa, 0x10, 0x3, "d82a5df532895e"}]}, 0x1, [{0x0, 0x0}]}) 16:26:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4, 0x2}]}, 0x18}}, 0x0) 16:26:28 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xfe80000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 627.067063][ T9526] usb 6-1: new high-speed USB device number 8 using dummy_hcd 16:26:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000880)='/dev/nullb0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x1) [ 627.315953][ T7358] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 627.346899][ T9526] usb 6-1: Using ep0 maxpacket: 8 [ 627.567371][ T9526] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 627.737241][ T9526] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.750876][ T9526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.760696][ T7358] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 627.781011][ T9526] usb 6-1: Product: syz [ 627.785325][ T9526] usb 6-1: Manufacturer: syz [ 627.793819][ T9526] usb 6-1: SerialNumber: syz [ 627.863450][ T9526] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 628.026838][ T7358] usb 1-1: string descriptor 0 read error: -22 [ 628.041045][ T7358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.066209][ T7358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.105166][ T2475] usb 6-1: USB disconnect, device number 8 [ 628.142473][ T7358] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 628.345102][T29325] usb 1-1: USB disconnect, device number 14 [ 628.881391][ T7358] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 629.126047][T29325] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 629.147104][ T7358] usb 6-1: Using ep0 maxpacket: 8 [ 629.346359][ T7358] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 629.546188][ T7358] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.555236][ T7358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.575730][ T7358] usb 6-1: Product: syz [ 629.579912][ T7358] usb 6-1: Manufacturer: syz [ 629.584555][ T7358] usb 6-1: SerialNumber: syz [ 629.633076][ T7358] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 629.649269][T29325] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 16:26:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}]}]}, 0x5c}}, 0x0) 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xfe80ffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000880)='/dev/nullb0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 16:26:31 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x4, 0x1, &(0x7f0000000000)="b2") [ 629.771575][ T7358] usb 6-1: USB disconnect, device number 9 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xfec0ffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:31 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 16:26:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x74, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x8, @local}, {0x5}}]}]}]}]}]}, 0x74}}, 0x0) 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xff00000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 629.961048][T29325] usb 1-1: string descriptor 0 read error: -22 [ 629.969909][T29325] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 16:26:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x9c, r1, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x4, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}]}]}, 0x9c}}, 0x0) 16:26:31 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xff0f000000000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 630.010489][T29325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0xffffffff00000000, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 630.086417][T29325] usb 1-1: can't set config #1, error -71 [ 630.094977][T29325] usb 1-1: USB disconnect, device number 15 [ 630.095454][ T2577] usb 4-1: new high-speed USB device number 11 using dummy_hcd 16:26:31 executing program 0: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x0, [0x5f, 0x0, 0x0, 0x400100]}, 0x40) 16:26:31 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffb, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaa32be6cfc44d4470011d4ffc8479b4e7f3218e5321286acadb21564149a2a45a11d08c2a9bf0037f707cd3b6207db90b8213db465d6175389cad4253e626633c22127dab7669400597a1b522668bf18ba15c88be078cb7ab175fcc5de3bade9e2917c254a707cb3634a17e3f350eced2c4a635f8aff60519b3aafa3b0a6e35fb22b21a4ef58b65b68033a4652a740162e1294565f4d36b69653e08b0a94f7c73a2918f579ff03dc705a91f0d71eb7b86c32aa74d1a318dfd847ce284d0f87a16e4cfc602b95c50dbffc982d0ae403f8b1a8f59112272f133691b6b7a1c25de4c965881a05a86344b51abd2b9c05769d06e58ed70642ed832b927d554da45340733499ba06198b3f727f2c7aac3c9311d28dfa57752d8231d016a9b89887a6111650b3fccacc3d0b416798ea746df45ff26e365b2a2aeaf28a88d66768218a791694c24b15d301dcd7a70740809ff827e6b2fc1e1f5bac9108a29ba46009ce388f2687aec524f4080000005988afa2f895e93c3e49d623a21b21779778058f36c31aa846120af2c2882cc310df25d02421356f472f0318244cb07951abc17601e29b92e0ba08c0974c0b5e00b4d6"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000003280)=[{0x0}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={0x0}}, 0x8000) accept4(r2, &(0x7f00000002c0)=@caif, &(0x7f0000000340)=0x80, 0x80800) [ 630.218429][ T7358] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 630.615289][ T7358] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 630.655419][ T2577] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 630.664527][ T2577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.685187][ T2577] usb 4-1: Product: syz [ 630.689356][ T2577] usb 4-1: Manufacturer: syz [ 630.693922][ T2577] usb 4-1: SerialNumber: syz [ 630.915139][ T7358] usb 5-1: string descriptor 0 read error: -22 [ 630.921381][ T7358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.945115][ T7358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.990395][ T7358] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 631.197741][ T17] usb 5-1: USB disconnect, device number 16 [ 631.980080][ T2577] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 632.359914][ T2577] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 632.604418][ T2577] usb 5-1: string descriptor 0 read error: -22 [ 632.610656][ T2577] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.634172][ T2577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.695224][ T2577] cdc_ether: probe of 5-1:1.0 failed with error -22 16:26:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 16:26:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x75, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x3f, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff04"}}}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) [ 632.799960][ T7358] usb 4-1: USB disconnect, device number 11 16:26:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.snckprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write(r0, &(0x7f0000000100)="75502217f9b5d18c0f80c2864f3cfd037f8866ff8113d026555e67808fc0452b0cc9a94da247808aab2dfcf06b220d9657e03942a99a95fd97110ec232d72c76a9bf8197b41d7cfbfb4eefd393ea938611531e61b8abe6fbf17a3fdb7b6195796b410957de2bc3cc167f8b55db1506422b054a0427c74b85e6017c2cffb8f9a0", 0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 16:26:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x38, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8000) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@caif, &(0x7f0000000340)=0x80, 0x80800) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback}, 0x1c) 16:26:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 16:26:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@loopback}}, 0xe8) [ 632.921343][ T2582] usb 5-1: USB disconnect, device number 17 16:26:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0x3, 0x0, 0x0, @loopback}, 0x1c) 16:26:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x38, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x32, 0x0, @remote, @remote, [@routing]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8000) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@caif, &(0x7f0000000340)=0x80, 0x80800) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 16:26:34 executing program 0: 16:26:34 executing program 4: 16:26:34 executing program 5: 16:26:34 executing program 3: 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0x12, 0x0, 0x0, @loopback}, 0x1c) 16:26:34 executing program 0: 16:26:34 executing program 4: 16:26:34 executing program 3: 16:26:34 executing program 5: 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:26:34 executing program 5: 16:26:34 executing program 4: 16:26:34 executing program 0: 16:26:34 executing program 3: 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) 16:26:34 executing program 5: 16:26:34 executing program 0: 16:26:34 executing program 4: 16:26:34 executing program 3: 16:26:34 executing program 5: 16:26:34 executing program 0: 16:26:34 executing program 4: 16:26:34 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 16:26:34 executing program 3: 16:26:35 executing program 4: 16:26:35 executing program 5: 16:26:35 executing program 0: 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4, 0x0, @loopback}, 0x1c) 16:26:35 executing program 3: 16:26:35 executing program 5: 16:26:35 executing program 0: 16:26:35 executing program 4: 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x5, 0x0, @loopback}, 0x1c) 16:26:35 executing program 3: 16:26:35 executing program 5: 16:26:35 executing program 0: 16:26:35 executing program 4: 16:26:35 executing program 3: 16:26:35 executing program 5: 16:26:35 executing program 0: 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x6, 0x0, @loopback}, 0x1c) 16:26:35 executing program 4: 16:26:35 executing program 5: 16:26:35 executing program 0: 16:26:35 executing program 3: 16:26:35 executing program 4: 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x7, 0x0, @loopback}, 0x1c) 16:26:35 executing program 3: 16:26:35 executing program 0: 16:26:35 executing program 5: fanotify_init(0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x4c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000480), 0xa198) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)={'syz0', "3dd2c1965e084f95ec5cf466d9104076008e69cde6f9f1b88e4bc8d0fed9d0733d97"}, 0x26) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 16:26:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0948000035000535d25a80648c63940d0224fc6010000940080000005a3582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:26:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0), 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 16:26:35 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0x8000, 0x203b}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3000000, 0xffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x8, 0x0, @loopback}, 0x1c) [ 634.350226][T29554] netlink: 12977 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x9, 0x0, @loopback}, 0x1c) [ 634.440127][T29558] netlink: 12977 bytes leftover after parsing attributes in process `syz-executor.0'. 16:26:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0), 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 16:26:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xa, 0x0, @loopback}, 0x1c) 16:26:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4a20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x18, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x8, 0x20}, &(0x7f00000000c0)=0xc) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0948000035000535d25a80648c63940d0224fc6010000940080000005a3582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:26:36 executing program 5 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xf, 0x0, @loopback}, 0x1c) 16:26:36 executing program 3 (fault-call:16 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:36 executing program 4 (fault-call:11 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 634.763589][T29572] netlink: 12977 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.788460][T29575] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0948000035000535d25a80648c63940d0224fc6010000940080000005a3582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:26:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x54, 0x0, @loopback}, 0x1c) [ 634.926390][T29585] FAULT_INJECTION: forcing a failure. [ 634.926390][T29585] name failslab, interval 1, probability 0, space 0, times 0 [ 634.935702][T29581] FAULT_INJECTION: forcing a failure. [ 634.935702][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 634.977193][T29588] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 634.985494][T29581] CPU: 1 PID: 29581 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 634.994174][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.004224][T29581] Call Trace: [ 635.007511][T29581] dump_stack+0x1f0/0x31e [ 635.011830][T29581] should_fail+0x38a/0x4e0 [ 635.016240][T29581] ? alloc_pipe_info+0xe4/0x4b0 [ 635.021075][T29581] should_failslab+0x5/0x20 [ 635.025563][T29581] kmem_cache_alloc_trace+0x57/0x300 [ 635.030830][T29581] alloc_pipe_info+0xe4/0x4b0 [ 635.035488][T29581] splice_direct_to_actor+0x97b/0xb60 [ 635.040838][T29581] ? lockdep_hardirqs_on+0x38/0xe0 [ 635.045935][T29581] ? do_splice_direct+0x340/0x340 [ 635.050944][T29581] ? fsnotify_perm+0x64/0x390 [ 635.055603][T29581] do_splice_direct+0x201/0x340 [ 635.060439][T29581] ? fsnotify_perm+0x20/0x390 [ 635.065097][T29581] do_sendfile+0x809/0xfe0 [ 635.069501][T29581] __x64_sys_sendfile64+0x164/0x1a0 [ 635.074678][T29581] ? do_syscall_64+0x22/0xe0 [ 635.079249][T29581] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.085292][T29581] do_syscall_64+0x73/0xe0 [ 635.089723][T29581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.095595][T29581] RIP: 0033:0x45cb29 [ 635.099462][T29581] Code: Bad RIP value. [ 635.103505][T29581] RSP: 002b:00007f9f89797c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 635.111893][T29581] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 635.119846][T29581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 635.127794][T29581] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 635.135743][T29581] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000007 [ 635.143713][T29581] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007f9f897986d4 [ 635.151681][T29585] CPU: 0 PID: 29585 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 635.160373][T29585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.170428][T29585] Call Trace: [ 635.173725][T29585] dump_stack+0x1f0/0x31e [ 635.178059][T29585] should_fail+0x38a/0x4e0 [ 635.182480][T29585] ? alloc_pipe_info+0xe4/0x4b0 [ 635.187330][T29585] should_failslab+0x5/0x20 [ 635.191834][T29585] kmem_cache_alloc_trace+0x57/0x300 [ 635.197130][T29585] alloc_pipe_info+0xe4/0x4b0 [ 635.201814][T29585] splice_direct_to_actor+0x97b/0xb60 [ 635.207188][T29585] ? trace_lock_release+0x137/0x1a0 [ 635.212393][T29585] ? do_splice_direct+0x340/0x340 [ 635.217421][T29585] ? rcu_lock_release+0x9/0x20 [ 635.222190][T29585] ? fsnotify_perm+0x64/0x390 16:26:36 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00'}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x7e, 0x8002, 0x7ffffffb, 0x8001, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000280)={r5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ftruncate(r1, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x97) [ 635.223735][T29593] netlink: 12977 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.226865][T29585] do_splice_direct+0x201/0x340 [ 635.226883][T29585] ? fsnotify_perm+0x20/0x390 [ 635.226897][T29585] do_sendfile+0x809/0xfe0 [ 635.226919][T29585] __x64_sys_sendfile64+0x164/0x1a0 [ 635.255511][T29585] ? do_syscall_64+0x22/0xe0 [ 635.260113][T29585] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.266184][T29585] do_syscall_64+0x73/0xe0 [ 635.270616][T29585] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.276508][T29585] RIP: 0033:0x45cb29 [ 635.280399][T29585] Code: Bad RIP value. [ 635.284466][T29585] RSP: 002b:00007f434e1fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 635.292876][T29585] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 635.300844][T29585] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 635.308822][T29585] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 635.316797][T29585] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000008 16:26:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x4, 0x0, 0x0, 0x0) [ 635.324773][T29585] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007f434e1ff6d4 16:26:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x58, 0x0, @loopback}, 0x1c) 16:26:36 executing program 0 (fault-call:15 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:36 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x210ec2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 635.396440][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 635.396449][ T29] audit: type=1800 audit(1594052796.772:553): pid=29598 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16103 res=0 [ 635.404780][T29601] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xfc, 0x0, @loopback}, 0x1c) 16:26:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x8, 0x0, 0x0, 0x0) [ 635.643107][T29616] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:37 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x1f4, 0x0, @loopback}, 0x1c) 16:26:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0xf, 0x0, 0x0, 0x0) 16:26:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x218, 0x0, @loopback}, 0x1c) [ 635.804815][T29626] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x60, 0x0, 0x0, 0x0) [ 635.901077][T29632] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', {0x2a, 0xffffffff, 0x8000}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fe0) [ 636.046301][T29639] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 636.203907][ T29] audit: type=1800 audit(1594052797.583:554): pid=29609 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16107 res=0 16:26:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x241, 0x0, @loopback}, 0x1c) 16:26:37 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x7ffff000) 16:26:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0xf00, 0x0, 0x0, 0x0) [ 636.312173][ T29] audit: type=1800 audit(1594052797.683:555): pid=29649 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16080 res=0 16:26:37 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x4e20, 0x9, 0x4e21, 0x9, 0xa, 0x0, 0xa0, 0x1d, 0x0, r2}, {0x100000000, 0x5ab, 0x5, 0x3800000000, 0x0, 0xe63, 0x80000000, 0xfaa}, {0x101, 0x6, 0x1, 0x8}, 0x1, 0x6e6bb5, 0x2, 0x1, 0x6, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0xa, @in6=@private0, 0x3506, 0x2, 0x1, 0x40, 0xffffffff, 0x17, 0x8c3}}, 0xe8) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000380)={{}, [@netrom, @default, @bcast, @null, @bcast, @default, @null]}, &(0x7f0000000480)=0x48, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000400)=""/102, &(0x7f0000000200)=0x66) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0xc3}, 0x1c) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x7ffff000) 16:26:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x300, 0x0, @loopback}, 0x1c) 16:26:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x3f00, 0x0, 0x0, 0x0) [ 636.409113][T29659] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 636.529286][ T29] audit: type=1800 audit(1594052797.903:556): pid=29658 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16111 res=0 16:26:37 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x3e8, 0x0, @loopback}, 0x1c) 16:26:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0xffffffff000) [ 636.582498][T29672] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x4000, 0x0, 0x0, 0x0) [ 636.709877][ T29] audit: type=1800 audit(1594052798.083:557): pid=29642 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16078 res=0 16:26:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x153042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x964, 0x0, 0x5, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x4}, 0x5, 0x0, 0x9, 0x7, 0x1f, 'syz0\x00', "564540f48dd102bf25dd234329b5954b4156b9a4cc4de7e4a5b1b521bd7942a9", "aae4119efc6278513e2c437cbb0c6b8cfd78b2f9c345297e6586452dd8311ea8", [{0x3ff, 0x5, {0x1, 0x4}}, {0x0, 0x7, {0x2, 0x8000}}, {0x4, 0x3ff, {0x41142c492d39ff09, 0x3}}, {0x0, 0x4, {0x3, 0x21f}}, {0x3f, 0x1ff, {0x3, 0x200}}, {0x3ff, 0x7, {0x0, 0x800}}, {0x4, 0x5, {0x2, 0x7}}, {0x1, 0x401, {0x2, 0x8}}, {0x5c6, 0x6, {0x2, 0xa6}}, {0x3, 0x6, {0x3, 0x101}}, {0x401, 0x3ff, {0x0, 0xffff0001}}, {0xf0, 0x8000, {0x2, 0x2}}, {0x4, 0x80, {0x1, 0xff}}, {0x8, 0x6, {0x3, 0x10000}}, {0x6, 0x8d, {0x2, 0xa5}}, {0xeb7, 0xa9, {0x3, 0x7ff}}, {0x6, 0x2, {0x1, 0x15e}}, {0x1000, 0x8, {0x0, 0x9}}, {0x0, 0x260, {0x3, 0x1f}}, {0xfffa, 0x9, {0x2, 0x9a}}, {0x5, 0xd25, {0x3}}, {0x1, 0x9}, {0x1000, 0xff, {0x0, 0x7de}}, {0x8001, 0x7, {0x0, 0x3}}, {0x1, 0xfff, {0x3, 0x5}}, {0xff, 0x9, {0x0, 0x4}}, {0x7fff, 0xfffc, {0x0, 0x4}}, {0x101, 0x48, {0x3, 0x2}}, {0xd3c5, 0x2, {0x1}}, {0x8000, 0x62, {0x0, 0x6}}, {0x9, 0x81, {0x5, 0x7fffffff}}, {0x15, 0x0, {0x6c53bbacfeb172c, 0x409e}}, {0xffff, 0x8ff, {0x3, 0x3}}, {0x8c99, 0x663, {0x65eeaf9504ebadee, 0x2}}, {0x5b, 0x0, {0x0, 0xffffffff}}, {0x8, 0x3b02, {0xffd38354d514a5c, 0x3fc4000}}, {0x5, 0x2, {0x2, 0x91}}, {0x71, 0x0, {0x2, 0x4}}, {0x4, 0xffff, {0x2, 0xae2}}, {0x7693}]}}}, {{0x254, 0x1, {{0x3, 0x6c63b8b2}, 0x1, 0x20, 0x3ff, 0xffff, 0x24, 'syz0\x00', "4d8568d874e55c8dec313f9c4866de80a92fc50e6c0001dcf8a99496be237a87", "4df80b910154c1bfcb327eafd812ee71cc747fe127b6f2baea1d528a5c824e45", [{0x8001, 0x2, {0x0, 0x10001}}, {0x5, 0x8000, {0x1, 0x9}}, {0x3, 0xff, {0x1, 0x2}}, {0x401, 0x7ff, {0x0, 0x7fff}}, {0x101, 0x2, {0x3, 0x7}}, {0x20, 0x800, {0x1, 0x3}}, {0xf0c4, 0x9, {0x0, 0x40}}, {0xfff9, 0x87, {0x0, 0xa75b}}, {0x7fff, 0x8000, {0x0, 0x4}}, {0x3, 0xe41f, {0x2, 0xfffffffa}}, {0x401, 0x9, {0x1, 0x7fff}}, {0x6d, 0x1, {0x1, 0x1ff}}, {0x1, 0x9, {0x2, 0x3}}, {0x5, 0x8, {0x1}}, {0x1, 0x7, {0x2, 0x5}}, {0x3f, 0xc, {0x3, 0x43}}, {0x8000, 0x2, {0x3, 0x872}}, {0x9, 0x800, {0x3, 0x46}}, {0x1, 0xf2c, {0x2, 0x7}}, {0x6, 0x1, {0x2, 0x2}}, {0x0, 0x100, {0x3, 0x1000}}, {0x2ea, 0x1f, {0x1, 0x5}}, {0x3f, 0x8000, {0x3, 0x8}}, {0x9, 0x20, {0x2, 0xa494}}, {0xffc1, 0xce, {0x3, 0x10000}}, {0x4, 0x2, {0x0, 0x2}}, {0x8001, 0x17, {0x1, 0x1e33}}, {0x401, 0x80, {0x2, 0xfffffff8}}, {0x1, 0x9, {0x3, 0x9}}, {0x4, 0x7f, {0x1, 0x400}}, {0x3ff, 0x5, {0x1, 0xda9e}}, {0x8, 0x1ff, {0x3, 0x1f}}, {0x1, 0x1ff, {0x2, 0xfffffff9}}, {0x8, 0x9, {0x1, 0x7}}, {0xb1c7, 0xf8f, {0x0, 0x3}}, {0x4, 0xd25, {0x0, 0x8001}}, {0x66, 0x8001, {0x1, 0x2ea19bda}}, {0xc4d8, 0x401, {0x2, 0x40}}, {0xba7, 0x6, {0x3, 0x5}}, {0x7, 0x6, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x8, 0x40, 0x17, 0x80, 0x1, 'syz1\x00', "a034c0fe29b493b6aadb695363b6ae71cca07cfe3b42421d8a18194c6300f5b0", "31079c0818d82deb69660b8c4fdffe59f37f0a9788cedcfb94f4111087b6e17f", [{0x9, 0x1f, {0x0, 0x498}}, {0x1000, 0x400, {0x2, 0x400}}, {0x3659, 0x2, {0x2, 0x9}}, {0x1, 0x2, {0x3, 0x2}}, {0x7, 0x6, {0x3, 0x3}}, {0x1b, 0x3, {0x2, 0xfffffffa}}, {0x200, 0x100, {0x1, 0x3}}, {0x80, 0x3, {0x1, 0x7ff}}, {0x800, 0x2, {0x1, 0x8000}}, {0x1, 0x8, {0x0, 0x6}}, {0x8, 0x3, {0x3, 0x9}}, {0x9, 0x3, {0x3, 0x78}}, {0x7ff, 0x81, {0x3, 0x5}}, {0x5, 0x79, {0x2, 0x3d}}, {0xadb6, 0x7d16, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x9}}, {0x80, 0x3, {0x3, 0x3}}, {0x176c, 0x3ff, {0x3, 0x6}}, {0x20, 0xea0, {0x2}}, {0xf748, 0x8, {0x3, 0x10001}}, {0xf733, 0x8, {0x2, 0x400}}, {0x120, 0x1f, {0x1, 0x9}}, {0x1d, 0x6, {0x1, 0x80000001}}, {0x200, 0x6, {0x2, 0x4}}, {0x2, 0x40, {0x1}}, {0x5, 0x6, {0x1, 0x7ec}}, {0x0, 0x8000, {0x3, 0x6}}, {0x2, 0x3fe, {0x1, 0x80}}, {0xfffc, 0x7, {0x1, 0x5}}, {0x2, 0x80, {0x2, 0x9}}, {0x7f, 0x2, {0x0, 0x4}}, {0x8001, 0x3, {0x3, 0x2}}, {0x5, 0x0, {0x0, 0x2}}, {0x7, 0x40, {0x2, 0x8}}, {0x4c, 0x6, {0x2, 0x100}}, {0x401, 0x9f87, {0x1, 0x80000001}}, {0x1f, 0x6, {0x0, 0x5}}, {0x81, 0x1, {0x3, 0xc44}}, {0xfffa, 0x9, {0x0, 0x6}}, {0x2, 0xff, {0x1b8f4b20d1c210e0, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffc0}, 0xa0, 0xc8, 0x3b1, 0xfff9, 0x4, 'syz0\x00', "43b9cb6af1ceae0da3e7d20fd9888e5d0071b52224f58bd1591521727c867ffe", "b6f1777403f46bf6c13715b226c9106d7f69773c3ec39d69c3b34abbeee40867", [{0x4, 0x3, {0x3, 0x4}}, {0x5, 0x3, {0x2}}, {0x4, 0xe32, {0x1, 0x2}}, {0x1, 0x4, {0x3, 0x100}}, {0x4000, 0xffff, {0x3, 0x3e5}}, {0x8, 0x1ce3, {0x0, 0x3}}, {0x6, 0x20, {0x2, 0xfffffffe}}, {0x1, 0xe76a, {0x2, 0x5}}, {0x7, 0x2, {0x0, 0x40}}, {0x8, 0x8000, {0x0, 0x6}}, {0x4, 0x720c, {0x1, 0x2}}, {0x400, 0x1, {0x0, 0xa3}}, {0x7, 0x9, {0x1, 0x72f}}, {0x4ed, 0x3, {0x1, 0x200}}, {0x4, 0x4, {0x3, 0x1}}, {0x9, 0x800, {0x2, 0xa2}}, {0x2, 0x4, {0x3, 0x5}}, {0x800, 0xbc4f, {0x2, 0x8}}, {0x8, 0x0, {0x1, 0xa37}}, {0x9, 0x9, {0x3, 0x3}}, {0x5, 0x51d7, {0x3, 0x7}}, {0x7, 0x80, {0x3, 0xa61}}, {0xfffb, 0x80, {0x1, 0xaf52}}, {0x6, 0x1f, {0x1, 0x8}}, {0x1, 0x7ff, {0x3, 0x4}}, {0x196, 0x8, {0x2, 0x7}}, {0x8001, 0x8, {0x2, 0x7}}, {0x5, 0x81, {0x2, 0x23}}, {0x2, 0x8001, {0x1, 0x1}}, {0x75cb, 0x2, {0x2, 0x2}}, {0xfd09, 0x1, {0x1, 0xfff}}, {0x40, 0x6, {0x1, 0x3ff}}, {0x5, 0x1, {0x2, 0xfffffff7}}, {0x1000, 0xfffc, {0x2, 0x2}}, {0x101, 0x20, {0x3, 0x4}}, {0x9, 0x0, {0x1, 0x989}}, {0xa2, 0x3a0e, {0x0, 0x80000000}}, {0x8, 0x0, {0x0, 0x9}}, {0x7, 0x3, {0x0, 0x7fffffff}}, {0x6, 0x9, {0x0, 0x7}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4b8, 0x0, @loopback}, 0x1c) 16:26:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0xffffffff000) 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x6000, 0x0, 0x0, 0x0) [ 636.762946][T29683] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 636.790706][ T29] audit: type=1800 audit(1594052798.123:558): pid=29673 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16120 res=0 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x1000000, 0x0, 0x0, 0x0) [ 636.950010][ T29] audit: type=1800 audit(1594052798.323:559): pid=29684 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16080 res=0 16:26:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x1c0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/85, 0x9c) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x103100, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000000c0)={0x7fff, "1825ed562ecd64dab24afff721cbcb5cc33a3c46245ee5b14f3a1515e948ce7f", 0x1, 0x100, 0x40000, 0x4, 0x1, 0x1, 0x6, 0x80000001}) socket$alg(0x26, 0x5, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x80000000000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x10000000000000cb) sendfile(r3, r4, 0x0, 0x200ffe) 16:26:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x500, 0x0, @loopback}, 0x1c) 16:26:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffc}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x4000000, 0x0, 0x0, 0x0) 16:26:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 637.205249][ T29] audit: type=1800 audit(1594052798.583:560): pid=29663 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16110 res=0 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x8000000, 0x0, 0x0, 0x0) 16:26:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r3, &(0x7f0000000080)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0x1000}}, 0xe) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x600, 0x0, @loopback}, 0x1c) 16:26:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r3, 0xf0}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) 16:26:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="05003300000000007130f4cd04b71662c07e70c84c77e434e0a01a1a9fd81f76e268eb49c101589ef1f99c8b0f70de8833d52f2a5faf78e1f4f9825f59d17a98cec4c9eb943bb6a7e3466398535956bf26527cbdbce6a4f37e227ca4397745b9dac56f26d24e8189eb4f1a7ef0c02a01dea5e573b8d99a06b338b2d64fe7e715d9e9a635413eb8ccd7f9f1b34cadbf21ba159d91a08dfa89403663fae6f44a03c0aeb686c81a6f3fb75eeaeaa7e8784d3981cff6075a39"], 0x24}}, 0x0) r5 = dup2(0xffffffffffffffff, r2) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000000)={0x800, 0x8, 0x10000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd439146c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2a2f11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026a771502e5372476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d06300000000000000"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 637.354433][ T29] audit: type=1800 audit(1594052798.733:561): pid=29725 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16118 res=0 16:26:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0xf000000, 0x0, 0x0, 0x0) 16:26:38 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x700, 0x0, @loopback}, 0x1c) [ 637.494029][ T29] audit: type=1800 audit(1594052798.873:562): pid=29724 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16123 res=0 16:26:38 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents(r5, &(0x7f0000001600)=""/62, 0x3e) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x8, 'syz0\x00', 0x6}) sendfile(r0, r4, 0x0, 0x200fff) 16:26:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x3f000000, 0x0, 0x0, 0x0) 16:26:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x1, 0xfc, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) getdents(r2, &(0x7f0000000280)=""/225, 0xe1) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x804) 16:26:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x900, 0x0, @loopback}, 0x1c) 16:26:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x40000000, 0x0, 0x0, 0x0) 16:26:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0xfff}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:26:39 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0xfff, 0x4) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xa00, 0x0, @loopback}, 0x1c) 16:26:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x60000000, 0x0, 0x0, 0x0) 16:26:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000080)) sendfile(r0, r2, 0x0, 0x200fff) 16:26:39 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0x5, 0x80, 0x3ff}) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x100000000000000, 0x0, 0x0, 0x0) 16:26:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xf00, 0x0, @loopback}, 0x1c) 16:26:39 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7f7a, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x400000000000000, 0x0, 0x0, 0x0) 16:26:39 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x1802, 0x0, @loopback}, 0x1c) 16:26:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents(r3, &(0x7f0000001600)=""/62, 0x3e) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @fixed={[], 0x10}, 0x1}, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x800000000000000, 0x0, 0x0, 0x0) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x2000, 0x0, @loopback}, 0x1c) 16:26:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0xf00000000000000, 0x0, 0x0, 0x0) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x2ee0, 0x0, @loopback}, 0x1c) 16:26:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000080)=""/26, &(0x7f00000000c0)=0x1a) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x3f00, 0x0, @loopback}, 0x1c) 16:26:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2a95fd880626299e) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x210, 0x2, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @remote}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x2e}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @local}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x210}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 16:26:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4102, 0x0, @loopback}, 0x1c) 16:26:40 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x5400, 0x0, @loopback}, 0x1c) 16:26:40 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x80) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @window={0x3, 0x7f, 0xffff}, @window={0x3, 0xfffe, 0x6}], 0x3) 16:26:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000280)={0xe, "74f8d4cf51d3ea636c141935e4c90deafbdc2aa637ff44a9c4b6842de2e5961f23507755f2d3321f56855226c31887c5b59dabbca29b4e524055c962e904cb51a913bc4caff31c3fbc3144df5307465b90cb664244e127edb889ff6b057d9f1ee85361e36da372fc8d981c4beb9017cd29ef5e10b03f18a151e7a3cbf6fbbf06"}) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x5800, 0x0, @loopback}, 0x1c) 16:26:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @loopback}, 0x1c) 16:26:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x4000000000000000, 0x0, 0x0, 0x0) 16:26:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$smackfs_cipsonum(r2, &(0x7f0000000000)=0x5, 0x14) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d2469fba83a21423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 639.921682][T29900] validate_nla: 23 callbacks suppressed [ 639.921689][T29900] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x11b281, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xb804, 0x0, @loopback}, 0x1c) 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xc4ff, 0x0, @loopback}, 0x1c) [ 640.073320][T29911] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 640.122044][T29915] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x6000000000000000, 0x0, 0x0, 0x0) 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xe02e, 0x0, @loopback}, 0x1c) 16:26:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xfa) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 640.287833][T29925] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:41 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xe803, 0x0, @loopback}, 0x1c) [ 640.342973][T29931] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 640.521278][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 640.521286][ T29] audit: type=1800 audit(1594052801.895:579): pid=29933 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16124 res=0 [ 640.736960][ T29] audit: type=1800 audit(1594052802.105:580): pid=29901 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16054 res=0 16:26:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'ns\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) getdents(r5, &(0x7f0000001600)=""/62, 0x3e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r3, r5, 0x14, 0x4, r7}, 0x14) 16:26:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xf401, 0x0, @loopback}, 0x1c) 16:26:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43, 0x9, 0x2, {0x5, 0xc75, 0x7fff, 0x80000001, 0x9, 0x0, 0x3, 0x2, 0x764}}, 0x43) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x20000001) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1a001, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000080)=0x1, 0x4) 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @loopback}, 0x1c) [ 640.874390][T29950] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 640.888170][ T29] audit: type=1800 audit(1594052802.265:581): pid=29934 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16121 res=0 16:26:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x100000000}, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = accept(r2, &(0x7f00000000c0)=@ax25={{}, [@bcast, @netrom, @null, @remote, @null, @default, @netrom, @default]}, &(0x7f0000000140)=0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) r4 = open(&(0x7f0000000200)='./file0\x00', 0x181080, 0x21) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000280)) ftruncate(r4, 0x2008402) sendfile(r0, r4, 0x0, 0x200fff) 16:26:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x4) [ 640.988035][ T29] audit: type=1800 audit(1594052802.355:582): pid=29951 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16375 res=0 16:26:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x44800, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @loopback}, 0x1c) [ 641.093586][T29968] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 641.112870][ T29] audit: type=1800 audit(1594052802.385:583): pid=29954 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16374 res=0 16:26:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x8) 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xff00, 0x0, @loopback}, 0x1c) 16:26:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x2}, 0x1c) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) [ 641.268486][T29980] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 641.314268][T29985] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xff0f, 0x0, @loopback}, 0x1c) 16:26:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) r7 = socket$nl_route(0x10, 0x3, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000000)=0x1000, 0x4) sendfile(r0, r6, 0x0, 0x200fff) 16:26:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xf) 16:26:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r5, 0x101) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x688, 0x0, 0xd0, 0xffffffff, 0x258, 0x0, 0x5b8, 0x5b8, 0xffffffff, 0x5b8, 0x5b8, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x3ff}}}, {{@ipv6={@mcast2, @remote, [0xff000000, 0xff, 0x0, 0xff], [0x7f7fffff, 0xffffff00, 0xa7251e7c78fe9d52, 0xffffffff], 'bond_slave_1\x00', 'gretap0\x00', {}, {0xff}, 0xff, 0x2, 0x2, 0x4}, 0x0, 0x118, 0x188, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x6, 0x2, 0x0, [0x8, 0x8, 0xf8, 0x9, 0x2, 0x2, 0xffff, 0x6, 0x1, 0x4b, 0x5, 0x401, 0x6, 0x1000, 0x4, 0xa2c9], 0x2}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xfe, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x0, 0x3, 0x6, 0x0, "0e4313457889dbb903285225df174dd8a457ad193dde18dbaac9241d7aad4e45d2cb491dce89faa52e8af96304b1f3b9af2f7c30a9575e3febf16adeb1a5aac8"}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xaf9, [0x101, 0x790], 0x8000, 0x20, 0x5, [@private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x2b}, @local, @local, @mcast1, @empty, @mcast1, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@private1, @ipv4=@broadcast, @port=0x4e20, @icmp_id=0x66}}}, {{@ipv6={@private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'vlan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2c, 0x20, 0x4, 0x1}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x8001, 0xc, 0x1, [0x5, 0x93eb, 0x101, 0xe1, 0x4, 0x0, 0x1, 0xff, 0x100, 0xf001, 0xd8e0, 0x1000, 0x8, 0x0, 0x9, 0x4], 0xb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@local, @ipv4=@multicast1, @gre_key=0x7f, @gre_key=0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e8) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:42 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0xffc4, 0x0, @loopback}, 0x1c) [ 641.505585][ T29] audit: type=1800 audit(1594052802.875:584): pid=29989 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16125 res=0 16:26:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b20100e1cdd4a8b77d86391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad165761c006d9476357ca4d7db8a119639311a4b8d9f29030000000000004ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a2697bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b0000b1102f53a7f81ef064e04197030c9b2685a136304353254900"/201], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 641.549885][T29999] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x60) 16:26:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 641.697519][ T29] audit: type=1800 audit(1594052803.065:585): pid=30008 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16371 res=0 [ 641.879295][ T29] audit: type=1800 audit(1594052803.245:586): pid=30018 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16372 res=0 [ 642.009025][ T29] audit: type=1800 audit(1594052803.376:587): pid=30021 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16118 res=0 16:26:43 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x2, &(0x7f00000000c0)=[0x0, r5]) setfsgid(r5) sendfile(r0, r2, 0x0, 0x200fff) 16:26:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f00000001c0)=0x80b9cc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4dde0c86b74be1bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback}, 0x1c) 16:26:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000180)=0x6, 0x2) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000000c0)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RATTACH(r4, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x80, 0x2, 0x8}}, 0x14) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:26:43 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/5, 0x5) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback}, 0x1c) [ 642.296042][ T29] audit: type=1800 audit(1594052803.666:588): pid=30032 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16377 res=0 16:26:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback}, 0x1c) 16:26:43 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf484b74b4222866c2a6a64900000100dfc1df144a3ad56576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35be53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26bcae564ef0220c76bb24e2e376dff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d06300"/197], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfff00000, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xf00) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x5, @loopback}, 0x1c) 16:26:44 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x60988, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='veth1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/30, 0x1e) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000280)=""/205) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) 16:26:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:44 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a648db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2ae0e51f11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e0ff97030c9b2685a1363043532549ea67"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x6, @loopback}, 0x1c) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x3f00) 16:26:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffdffffeea, &(0x7f0000000040)={0xa, 0x4e22, 0x20, @empty, 0xffffffff}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x7, @loopback}, 0x1c) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x4000) 16:26:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x3) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x1, 0x7, 0x2, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) write$binfmt_misc(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48) listen(r5, 0x170) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback}, 0x1c) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x6000) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xa, @loopback}, 0x1c) 16:26:44 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0x10000}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') listen(r3, 0xff) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xfb, 0x3b}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d73686132353600000000000000000000000000000000000000000000000000000000000000000000e1598fcd00"/74], &(0x7f0000000280)="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", &(0x7f0000000200)=""/59) 16:26:44 executing program 0: ustat(0x800, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x3) 16:26:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x32}, 0xfffffffc}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x4ea0, 0x10000, @private0, 0x100006}, 0x1c) open(&(0x7f0000002000)='./bus\x00', 0x1432c2, 0x0) ftruncate(0xffffffffffffffff, 0x8000000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @remote, 0xe9}, 0x1c) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2881, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x200fff) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf, @loopback}, 0x1c) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x1000000) 16:26:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0x40000000}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x8000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x4a805, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000170a01020000010073797a300000000008000740000000010900010073797a3000000000fc5eefb97360f96dfc34582e7be5c53802a341f8f640050f68b94daaaef1ab2d9fdb36bf2f2c76fda7ab155e5ca48a88cea461c5164356ce3643024557f52b91cab6f3f92c42138792ec46b5b45d53cc7f878312a5378ff1aeb1"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="00000200"], &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x200000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x14c}}}, &(0x7f0000000340)=0x84) sendfile(r0, r2, 0x0, 0x200fff) 16:26:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x4000000) 16:26:44 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x54, @loopback}, 0x1c) 16:26:45 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x6) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b42228e8bca79049db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x8000000) 16:26:45 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x58, @loopback}, 0x1c) 16:26:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x101, 0x0, 0x1, 0x3, 0x1f}, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xf000000) 16:26:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x86000100) inotify_rm_watch(r2, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:45 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfc, @loopback}, 0x1c) 16:26:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x3f000000) 16:26:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x568a1ea7889afaab, "2e4207ff7fca8143"}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000041c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) 16:26:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x40000000) 16:26:45 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x1f4, @loopback}, 0x1c) 16:26:45 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000080)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:45 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x218, @loopback}, 0x1c) 16:26:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x60000000) 16:26:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x7fff, 0x1, 0x2, 0x57d962af, 0x0, r7, 0xb5f}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000100), 0x4) 16:26:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x241, @loopback}, 0x1c) 16:26:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) mq_unlink(&(0x7f0000000080)='\x00') close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000280)={0x10001, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x41}, 0x4}}, {{0xa, 0x4e24, 0x12, @ipv4={[], [], @empty}, 0x98c7}}}, 0x108) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x100000000000000) 16:26:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x300, @loopback}, 0x1c) [ 644.954843][T30245] validate_nla: 25 callbacks suppressed [ 644.954850][T30245] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) sendfile(r0, r2, 0x0, 0x200fff) 16:26:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x400000000000000) 16:26:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3e8, @loopback}, 0x1c) [ 645.126256][T30257] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:46 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x9) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000280)=""/4096, &(0x7f0000000080)=0x1000) sendfile(r0, r2, 0x0, 0x200fff) 16:26:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:46 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x4b8, @loopback}, 0x1c) 16:26:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x800000000000000) 16:26:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:46 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x500, @loopback}, 0x1c) [ 645.537170][T30273] ptrace attach of "/root/syz-executor.2"[6984] was attempted by "/root/syz-executor.2"[30273] [ 645.560616][T30275] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xf00000000000000) [ 645.715712][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 645.715721][ T29] audit: type=1800 audit(1594052807.087:607): pid=30276 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16383 res=0 16:26:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x600, @loopback}, 0x1c) 16:26:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2490c418", @ANYRES16=r8, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0500337060a6330011a1bebcc1357b0e68a1bda8236da81369c635000a9c9e2c483032b6577be9e91c6681d9768c7da7480b07c92cd0df459078414db48d3bba2bdb"], 0x24}}, 0x0) bind(r7, &(0x7f0000000080)=@isdn={0x22, 0x3f, 0x9, 0x7, 0xc}, 0x80) 16:26:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x2000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd475a91b495642e2a7b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 645.839296][T30273] ptrace attach of "/root/syz-executor.2"[6984] was attempted by "/root/syz-executor.2"[30273] 16:26:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 645.882479][ T29] audit: type=1800 audit(1594052807.147:608): pid=30288 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16382 res=0 16:26:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0xfffffffe, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @private2}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffffff6e, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x700, @loopback}, 0x1c) 16:26:47 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x3) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000340)="95aaaab0bb71f0651354001c85c1a8fefbe41fda4264631cc87f4bb545a70a638a694368cf8e919de04d51f4e13c58b7707a382d6eb210515ef0bc433faafd1ebee15f1d1d15fd142d38966498e2eb94e4d4e9451e601146f812b08e", &(0x7f00000003c0)=""/235, &(0x7f00000004c0)="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", &(0x7f0000002040)="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", 0x1f}, 0x38) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x1cb042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="88000000200020002dbd7000fcdbdf24022020087f000006010000000c000c40000000000000000408000b000100000008000b0001040000080002000a010101050013000000000014001100687372300000000000000000000000000800010064010101140011006261746164765f736c6176655f31000008000b000000000008000100ac1414aac3c618d12d710d24a31b53d15b791a56f39633665f4070921360637041b7400e435e8f3896531ef7a79c9cb8e35113de246743fe3e4423a179de11398ae862009ecb820c2565c25d"], 0x88}, 0x1, 0x0, 0x0, 0x20004001}, 0x44040050) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 645.985128][ T29] audit: type=1800 audit(1594052807.308:609): pid=30282 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16384 res=0 [ 646.018540][T30310] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:47 executing program 3: mmap(&(0x7f0000552000/0x3000)=nil, 0x3000, 0x2000004, 0x392d6ad36ec0c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4044c04}, 0x10040010) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 646.086465][ T29] audit: type=1800 audit(1594052807.458:610): pid=30312 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16155 res=0 [ 646.109172][T30319] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x900, @loopback}, 0x1c) 16:26:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x4000000000000000) [ 646.194554][ T29] audit: type=1800 audit(1594052807.498:611): pid=30315 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16379 res=0 [ 646.310865][T30333] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 646.343979][ T29] audit: type=1800 audit(1594052807.718:612): pid=30332 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16366 res=0 16:26:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xa00, @loopback}, 0x1c) 16:26:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x6000000000000000) [ 646.406220][T30340] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:47 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x200000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) read$fb(r2, &(0x7f0000000280)=""/234, 0xea) 16:26:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x2, 0x0}}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x4, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r5 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}]}, 0x28}}, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 646.502303][T30354] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:47 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf00, @loopback}, 0x1c) [ 646.571967][T30360] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 646.634721][ T29] audit: type=1800 audit(1594052808.008:613): pid=30355 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 16:26:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x1802, @loopback}, 0x1c) 16:26:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x120, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0xffffff15, 0x30}, &(0x7f00000002c0)=0xc) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 646.745289][T30373] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 646.765644][ T29] audit: type=1800 audit(1594052808.138:614): pid=30361 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16180 res=0 16:26:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x2000, @loopback}, 0x1c) [ 646.875887][ T29] audit: type=1800 audit(1594052808.248:615): pid=30376 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16364 res=0 16:26:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x3c}}, 0x4000040) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r4, r5, 0x7f, 0xa0, &(0x7f00000001c0)="9c1f96337d073eef831a7e682730665b0d45e2941ccd840b9cfcd62efa0ba02ce7b94664b3031376832401d6b2b34e937e045e22a49fd827b63e7402fcec8003b1a5dfd6ea6257926b560242d846fe75c64340943ed379b972feb9fa4ae728a5e3d9936a71b3d4a4ba768318b113a01e9097188086eb73f064b055764cdd88c18199f71141dd2604df6dde5315c32a62185b7d1ba1488d00e7e3d0e99a48b9d4", 0x3, 0x4e, 0x9, 0x75, 0x0, 0x3, 0x80000001, 'syz0\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000000c0)="8a21d62717de8abe79509d5b90816877fd0361c683b3a08d442989fd0d33a071c61d7a074b9b05ff59e6ecaf786bf2a31834505bd363866b16192b1df2fde814204263b14b962574d61003e5778364c207b9a5a6096cc35867f36d492cd4b5d17ad08ae4bdca9f42fbdad844aa05928a9d15943162aac557fd868b0ca7e5d598bb19e3781a5741ef4dfd55db9f20451193876447fdfb13a644b176d1479269e131d1b7cc9143e1d2a3c2cdc22fc2567cbbdb740990ca1b891c94a3c20216da01ab2ec13f7a7389c351abf665f82074eb91e4ef8161", 0xd5) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1307edffff4da2f16b0500020000870900"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:48 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/3) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400000) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RFSYNC(r6, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x2ee0, @loopback}, 0x1c) 16:26:48 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xd0a25500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0xfffffffffffffe38}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:48 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r5, 0xffffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r6, 0x7, 0x4, 0x973, 0x0, 0x8001}, &(0x7f0000000180)=0x14) sendfile(r0, r2, 0x0, 0x200fff) [ 647.152029][ T29] audit: type=1800 audit(1594052808.528:616): pid=30394 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16365 res=0 [ 647.176072][T30403] IPVS: ftp: loaded support on port[0] = 21 16:26:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3f00, @loopback}, 0x1c) [ 647.195599][T30408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:26:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:48 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2040, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, [], 0x1}, 0x20}}}, &(0x7f0000000200)=0x84) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:48 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x4000, @loopback}, 0x1c) [ 647.577761][ T63] tipc: TX() has been purged, node left! 16:26:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x1bc, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xf0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40805}, 0xd307e97d6f693dc4) 16:26:49 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "83204f14e848bfd2df731b4d11d5e14655fc187b"}, 0x15, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="696e6465783d6f66662c6e66735f6578706f72743d6f6e2c0010c8bdcf008570828d3d47856d8f0a2bfbb486123d7fce22c762bd8a590f691298afe9927bebbdd34aa3cdb0765ecbfa8616b182aa041a7e8e2820c777d4f81b267650c96ebf9469abac6d2890945af17032a8da8d8da2dacda95a295dc84417fa5777b7e8a3b4f39203768e68311f4ae127cb985c6d0cfddbc8db8bba3bbb77340c5d839f"]) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x43042, 0x2) ftruncate(r6, 0x2008002) sendfile(r2, r6, 0x0, 0x200fff) 16:26:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x4102, @loopback}, 0x1c) 16:26:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x1ff, 0x5, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x2, 0xac3b, 0x3f, 0x9, 0x6, 0x1, 0x69f7, 0x5e, 0x0, 0x1, 0x5, 0x5, 0x4, 0x2, 0x9, 0x4c6]}) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x10100) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x2000000, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000100)='./bus\x00', 0x20840, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="2095f3ef"], &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x8d, 0x5, 0x65bf}, &(0x7f00000000c0)=0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 647.775569][T30458] overlayfs: conflicting options: nfs_export=on,index=off 16:26:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x5400, @loopback}, 0x1c) [ 647.842907][T30458] overlayfs: conflicting options: nfs_export=on,index=off [ 647.893597][T30408] IPVS: ftp: loaded support on port[0] = 21 [ 647.944388][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:26:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) getdents(r0, &(0x7f0000001600)=""/62, 0x3e) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f00000000c0)={0x3, "8758577148ac4b11f96715a8c0460a659d3158b12736836490b9dce6ee406278", 0x3, 0x1}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r6, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0xffff, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x46) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000280)={0xff, "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x5800, @loopback}, 0x1c) 16:26:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000001f13a80629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc883738c4652ea4f7d0b6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e0019c97030c9b268590363043532549ea67d0"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000000)='./bus\x00', 0x14b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:26:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x80fe, @loopback}, 0x1c) 16:26:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='+*](()+%:\x00', r4) 16:26:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x6, 0x6, 0x3e75}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:49 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xb804, @loopback}, 0x1c) 16:26:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xad49b10c09a3fa1c}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x1f8, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc554}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d27}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2d5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x579019f7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff3ead}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x296}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20048080}, 0x95) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r3}) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000000)={0x6, 'geneve1\x00', {0x7}, 0x9}) sendfile(r0, r6, 0x0, 0x300fff) 16:26:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xc4ff, @loopback}, 0x1c) [ 648.667151][T30557] ptrace attach of "/root/syz-executor.4"[7207] was attempted by "/root/syz-executor.4"[30557] 16:26:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b5bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d06300"/197], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/63, 0x3f) renameat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000080)='./bus\x00') 16:26:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40100, 0x130) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe02e, @loopback}, 0x1c) 16:26:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe803, @loopback}, 0x1c) 16:26:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10) close(r0) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 649.350222][T30561] ptrace attach of "/root/syz-executor.4"[7207] was attempted by "/root/syz-executor.4"[30561] 16:26:50 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 16:26:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf401, @loopback}, 0x1c) 16:26:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r2, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:50 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfc00, @loopback}, 0x1c) 16:26:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents(r1, &(0x7f0000001600)=""/62, 0x3e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) close(r0) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500332f26c2c6ae7beb3b8e3b7cfd330000000000"], 0x24}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000001d40)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="8649c83d85985e54e82462964703af59e630840561c4a3da9ca06150bba44b9368534dfd36defe63e01047af808d9061b506996db24bd47e512996d6c18f55fbcca25b4125c80d312e68ae7c6e4886508ee9ed14b29c199678", 0x59}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0xfffffffffffffede}}, {{&(0x7f0000000300)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="cdd7aa05301ed764926b0438757f2e0292aaadcdefa9127ca3918611f12630a0fd29c5a3771ee141992c176d170669bd00e0afce04d432afd0dbe33ff2960b372c48568e4feaf68e487e093b7f6618e95ce33758ed8a086b9c069278199604ff372853a0028bb48294b85ad57955f86f1236dc69d3a4f3422ec5d214bcfc47207e24a2a26f07961cdf9392d087515c425b7728a2b7eebd1514d7e4aeb4d02f8b7faf3f3f83df77d60205e31c20e51cd11a863968e8103ab3542d4562d987101e430d649ebb0f38d5efdc5cd03fa8d0890fe5f3447daf88285ecfcf2ff8f9d7706e77f1", 0xe3}, {&(0x7f0000000540)="1f966cc13014c1eb165b6b337aa910989f16f14a298d3492f11559e5b6caab7c0030c5cffa00acec11d8c57bf94554f013ec24f14d54ee99c885dd6624076df64d32b13d023d0f6469d406142c264bf45d3779e220905ffdd53c9cba373fc6b3a6e070620f7c9bf2628d7471f8cfb15b38448d3de253aa03adb869062cf847d88796edb394b96b63e1fffc10d489f9d200da90221161248e538397bdb981830a20ef41a54e58d15ee7858c9e58fa5c8d211dd69384475b2900abf8421d4d", 0xbe}, {&(0x7f0000000600)="bc8af1812407ac0581a0aea9565deb954938ca352aae44a631e11c0615bce247487306a4cdc76ee196680b4bea36196320f95173a3d4ee02b6b994eb5409218a25c9bf1f8bd3448d40c3bc75270c3e2200a7b370b1a1514ccc6104a12df5e416f1408721eb1c8a8dbdb8b427dc93b9ad2e99734c6948333da0c1b38fabe26d868c9bf836c2f6e72d8160593e990c67a06e986dce1aa5f18b94936388d5eb9c623f534c2377b306506b016b8e5da9ed359d7a8bb0e4baf9d52f641f7729ee89bfcbaf927557d2", 0xc6}], 0x3}}, {{&(0x7f0000000740)=@ll={0x11, 0x8, 0x0, 0x1, 0x1, 0x6, @random="702d16af713c"}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="bfa0faf795312ad3bd3e66190faab9fb67266f121bad205b89692976486eef7da63b7327212470244b995a18415a9a16e336ebb69b7ff99ad54691ea91e17c4023a258eb43416e065e367375a0b6a63bfab58ca49b3145a03bf0c8c80a385321eb869dc9a115808ee84b447ce33ccd018080876ceb9b8e0b27f9f65b98fe70964af4b6d722efd663fdbf15c0947d389f9d61c4d2904dc63c5afd", 0x9a}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff30f}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe1e97792}}], 0x90}}, {{&(0x7f00000009c0)=@l2={0x1f, 0x81, @any, 0x0, 0x2}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a40)="c176dbd9a19a0617d9b176f8bc7c5f41905952d8d5848515ed8b54479b0216e588a2c5346eea0520c0ae50ea38eb1233ec2a1be27e1a564ef046ecaf5855fb31f28ca153b82f86386a47f81574a3fd97cb882a66db2358311b392a7d4f676395d5babde61597e4f73a4398613635e08bc304a2e1dbdba8ec7f4211cfa23cfede4cf3af1f6644ddebaea1e24523cd431219648c1b76da5141132ac3398a809998f16c7f6cb2771b5d8126f4df7ad63796c229349daf19bdfb9e4a73dbf692267d3c2fe6f3caee5b54cc5fb24afa8d18e2b3af92d1a993e4b9821efb0d6976223d44d97d08aab49c6ca94961", 0xeb}, {&(0x7f0000000b40)="3761c89f867bb470bc589f2712f41d158efbebead79e6def1cba262bc68e779dd3d32efb040ffc38626ce013b7a3372d80eca528c6d724e6b5d180399f829502f7ba8f69695b5423e7d0abf13ed65ab1ef37155185131909a101a062d3", 0x5d}, {&(0x7f0000000bc0)="bf4b4f882ba9c8be9f0139be4f39d0d9c2661212bc1a51c3749381031d95ed7d7d1207118dfc945783d2334cdd5801312d75bceed75f2041f5b897383d78f6114e1a8c6d4f398890ba26599e1e888196f464368988d7b4d1f3929bad40a77076363417ea0754b24362ad3efd661782d2c17bd8312f93d4238f5eb144866d908336c2ae81cf21e393b7658c1f809ed09757b9f7343e7b1cee10c7f550207c8ef0e20dd9d3e5a401a110", 0xa9}, {&(0x7f0000000c80)="dfacfb6c345a519e03833bc93150d6d8c7b056e1e71f49b126", 0x19}, {&(0x7f0000000cc0)="74f14dd17808bdf5ea46a6b50bce2590dd97cd2d3b210b08934d78fd8741057be838185806eb9fc3911d811b14feab0c23fa60caa115f51753c9727bf94aa1d13c494e527124ffa09480c22a61cc44ced678b2b0b70cb5301a52c065ea919ed6d9621ed54ab897046206b5cd46fce79977448084361643146419a0d7d0557a7690e5fe84e796cef14341a62ec107680ec8256d51b4932c7e2ebfed60ef63fb0d020fccc62a900ed30b0befd5d01cec963a9cf0d65e9d4d635d857f7a120a6f7c0f0ea0c31428aa8f6283b65ea03666c17e66076f65a46c14aa", 0xd9}], 0x5, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfff80000}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2ad5}}, @timestamping={{0x0, 0x1, 0x25, 0x8000}}, @timestamping={{0x0, 0x1, 0x25, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xd8}}, {{&(0x7f0000000f40)=@isdn={0x22, 0x0, 0x7, 0x0, 0xc5}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000fc0)="7a5fbc49d6255abd0896c86f6865c32273bfbf2a83123fb349196639bd8c627414e1e8c2d374c27cc73a5d05a73bb78b6a54ee3a361cc07a863c0f7854a7599bbe58e0ba8ebef26f1e299a1fcf6a2335be5a90c7324c7a6a25ebe95f1c773148d1343f3f8d3d92c9d1d889c6071002e3bd8a846cefe540d2aa7b40276fa08312e9", 0x81}, {&(0x7f0000001080)="8ce6131d7cd264736f686de9cd", 0xd}, {&(0x7f00000010c0)="7ad9197356da324c6534a746de3b0a3af9a9eef1059729c720e7d70526f8e73b6079e0f9a65b05854900cbd13260fa20335ca1be81adf1da7fca3c8ec2767b2c44aedb29b31910d62c57761322b74441793f0da51e518984d85cba60d19eed0bed8fced334b4a3a372d13fb0d745ca967b3b1fab0c9a07d306d751ac61275b287e3177f9c18bd291a0b83b9be92315a012a25cf1da7bb53faeafd934ed1c9edeac191b77889560ede33f08e5c78c5ff7cd8394bd02c8418a618dc0b2a2a9f7a44cac400d841dd5a643cacaeed7d4", 0xce}, {&(0x7f00000011c0)="fcbef5636f8cbb9c65c583b9f633e0d30e00bd2b9e1d589d80c2b3", 0x1b}, {&(0x7f0000001200)="b48741a5a6bd3c1a1600d2bf585da1f31c6f929be06378b9feebb3e9f11fe37275339379f144ac54a9dc4a332c2e740afc7d3a501cb20d003790465529b9ba24", 0x40}, {&(0x7f0000001240)="6741e90a56128759cc92fbc26fce2c3f4c768e9e9988141bbb13ed5fc3de8aca", 0x20}, {&(0x7f0000002040)="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", 0x1000}], 0x7, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x200}}], 0x18}}, {{&(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0xffff, @remote, 0x8}}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000013c0)="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", 0xfe}, {&(0x7f00000014c0)="8cc6a4ba6c4917f2068b7fda81e3edd062ec915fa53fbf4c1029b7723af4b359f8b5ac4d865a1ea6e99a6e74151610f4acc4bc3aad0c4561de595c0fe789513c26d249fed762f305721af7cd2ced34062158feca87f04dff29348b7872006267c7ced773a1e7914783", 0x69}, {&(0x7f0000001640)="7a821dccd60af2997e6de2f23e32561e99a8c3efe48bdc519d1803c00e402775c2f36519bb1c53cc580df9a8700465bc445f054a144a66866fd71e073f85db2021d396248f5ff438600874afff8ff23121cbd178b6b97e1103b0330047ca8caa0639961fd1de1fc62f6514b686b9e2061f2b2a7e0aeb998c2b86cf4231c25cfdf90f5195c75cf025034c2db7318028f49231e10487e28d390ccd6bd4b2c07cfaf2e1a36fa032277d782c3b2771a14096baaf02106de2ecb17307ba65117bc959f653f7daf14cbc2331358e6610df165add346cf6495e6d0fbb4fda", 0xdb}], 0x3, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0xa4}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f0000001740)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000017c0)="362e980531c4a85fa2c5e707a1a73d5a1dd8057ebbc5c4cb57a4a7cb05bc63397ff88232c34f349b55c4e95bc82546781fdcf3cdf6c45dd1b1693e500db0d212092241053b31b2d0e8605c3cf97382ae90fba317b9990eb09e57f7e6dfad50bb27df913af5533cd1cbb711ca495835bad890bb9cb911701a88edeb9662572a10e99cc2b89af3c47783be5a472902ccfcfd78e59bb44907315467cce7bbdd99d348d412d7125fcbd0438fe5", 0xab}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="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", 0x1000}], 0x3, &(0x7f0000001880)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xd9fe}}], 0x90}}, {{&(0x7f0000001940)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)='\nr!KZ[', 0x6}], 0x1, &(0x7f0000001a40)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x70e24ad7}}, @mark={{0x0, 0x1, 0x24, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xc0}}], 0x9, 0x4008010) sendto$inet6(r2, 0x0, 0x61, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:26:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfe80, @loopback}, 0x1c) 16:26:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0x6) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES32=r4, @ANYBLOB="887f9620351e8aee0f2250353d3d2990f95b4e1b0fb5d8578df4f9b1df95aaf8e6f039fdd32a0e456a0e8aead82d5ea12f9a4cc548911685a15cb7a4c3fa516b3b9b53f988bb165771d964fcab4a449c3e0fe8b4c55b541b37e53feaad1eec45e9f3a26126b6128d2de65ed67e20c24db2c9443f7c9a"], 0x24}}, 0x800) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = socket(0x1a, 0x4, 0x6) getsockopt$inet6_tcp_int(r5, 0x6, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x4) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xff00, @loopback}, 0x1c) 16:26:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000280)=""/205) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x2800, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xff0f, @loopback}, 0x1c) 16:26:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffc4, @loopback}, 0x1c) 16:26:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0xb1dcddecb3bae749}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0x820) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x24000c00, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:26:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0xfc, 0x2, 0x0, 0xfffffffffffffffc, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0xb) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7fee, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba637110332e545155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x40000, @loopback}, 0x1c) 16:26:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r1, 0x0, 0x8, &(0x7f0000000040)='nl80211\x00', r6}, 0x30) sched_getscheduler(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r9, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYRES16=r4], 0x24}}, 0x48000) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 650.613266][T30654] ptrace attach of "/root/syz-executor.5"[7357] was attempted by "/root/syz-executor.5"[30654] 16:26:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x50000, @loopback}, 0x1c) 16:26:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)={0x212b80, 0x4, 0x16}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 650.809490][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 650.809499][ T29] audit: type=1800 audit(1594052812.190:632): pid=30658 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16369 res=0 16:26:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf0ff7f, @loopback}, 0x1c) 16:26:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xfffffffffffffffb}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r4, 0x1}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYBLOB="75aa51dd8f397c6e74ae40fe0ccfe3823cd5d5ae16cd13fd3c2c9735bb143717ee1f6b3afc55d9af1238da36181d738e57e8dc26d71cf3744b023d6e96a642a7be4f7df7a7742d9ea0106c554b79e129f8d0a9f387c1379eadc8bf538eb0fd9426f59360054aa6ed20ec1f1b7c080f5a2718f60d2998c514f562162115f0b969420a46a07f9b69bea60aff12f4ee324cff", @ANYRES32], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) [ 650.981538][ T29] audit: type=1800 audit(1594052812.360:633): pid=30664 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16366 res=0 16:26:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000200000000000280012000c0001007665746887b2e5a798"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x3c}}, 0x20000000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1303000000000000e9b6070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) 16:26:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) [ 651.228995][ T29] audit: type=1800 audit(1594052812.610:634): pid=30642 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16173 res=0 16:26:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x41c2, 0x40108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0xfffffffd, 0x7, 0x0, 0x81, 0x49}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0xc841}, 0x5884) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) [ 651.333983][T30687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 16:26:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0xb00, 0x0) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0x40000, 0x0, [0x1, 0x0, 0x9, 0x10001, 0x5, 0x9, 0x2, 0x2]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 651.372885][ T29] audit: type=1800 audit(1594052812.750:635): pid=30686 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 [ 651.406784][T30698] validate_nla: 7 callbacks suppressed [ 651.406792][T30698] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:52 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) [ 651.474125][ T29] audit: type=1800 audit(1594052812.850:636): pid=30695 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16379 res=0 16:26:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9feb6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84010012c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:53 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) 16:26:53 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x5000000, @loopback}, 0x1c) 16:26:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 651.819283][ T29] audit: type=1800 audit(1594052813.200:637): pid=30717 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16368 res=0 [ 652.072789][ T29] audit: type=1800 audit(1594052813.451:638): pid=30685 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16183 res=0 [ 652.108874][T30703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 652.155666][T30698] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:53 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x1401, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf484dfddb6ecf4a01a4316c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639021a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba637346300000000000000006b84e0e212c36dbcf8e5660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e0019719255e5198240ead65e9030c9b2685a13668e1ce3a8effd73ceb89967d3ee2395034882c4fd9407c32d7b244d6318a235e06c752d2a0a74855df865458476344633db3d336ad40838a13d9228e8e02834c9a585c7ee9f03f1c"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:53 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x6000000, @loopback}, 0x1c) 16:26:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000001c0), 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) exit_group(0x4bb9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x18000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 652.279879][ T29] audit: type=1800 audit(1594052813.661:639): pid=30733 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16079 res=0 16:26:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents(r1, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000380)={0x10000, {{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x10000}}}, 0x108) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x84, r4, 0x100, 0x70bd2c, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffbd5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd333}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40008) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:53 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400000, 0x88) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000000c0)=0x7) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:53 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x7000000, @loopback}, 0x1c) 16:26:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000080)="7d25e93cbb03b4d1aef4d5a5954af63bbfd63c61cbea4b3b0b585d0290e61ad901f6c69a5bbb") r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) 16:26:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x8000000, @loopback}, 0x1c) 16:26:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000008a30000070000000c0002800500020000000000"], 0x20}}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x18, &(0x7f0000000140)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x200, 0x5a}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r8, 0x5}, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 652.591266][ T29] audit: type=1800 audit(1594052813.971:640): pid=30742 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16079 res=0 16:26:54 executing program 2 (fault-call:16 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:54 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0xffffffff, 0x1, {}, {r3}, 0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 652.699470][T30762] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 652.763537][ T29] audit: type=1800 audit(1594052814.141:641): pid=30756 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16197 res=0 [ 652.798671][T30774] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x9000000, @loopback}, 0x1c) 16:26:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents(r3, &(0x7f0000001600)=""/62, 0x3e) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)) 16:26:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000001c0)=0x100, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/73, 0x49) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@multicast1, @in=@local}}, {{@in6=@ipv4={[], [], @private}}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'macsec0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000280)="97c6c1d6c8258dc025d4dde5b2031393c5c0cd314724bde72a746632c0491175b66ce8135c905ebdaeb6adb7bb7dd524197bf44713c93eaaee87afcefbd2dcc71de1ac6bb40e6287560fd76ac1617511173d3a44850d4c4b61c04f2c28bd6452bbf090e536ebc1509cea93d188b7a04957d0a9fb8732e106e30f6f3fd985a200083705f90605f300d3e825846c9cdb1ae5613a6809872c0ccc6d3c1155c38c6a0ac52dc06ff8688e801f993c38b9af8eb3b70514a5efd3a89ea76a4255c6c3f641dfdc9a5c220b27566bad8cf00224eb06f41404bb", 0xd5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:54 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x40040, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40c001, 0x0) accept4$x25(r2, &(0x7f0000000200)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xa000000, @loopback}, 0x1c) [ 652.965172][T30777] FAULT_INJECTION: forcing a failure. [ 652.965172][T30777] name failslab, interval 1, probability 0, space 0, times 0 [ 653.049747][T30777] CPU: 0 PID: 30777 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 653.058464][T30777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.068522][T30777] Call Trace: [ 653.071921][T30777] dump_stack+0x1f0/0x31e [ 653.076269][T30777] should_fail+0x38a/0x4e0 [ 653.080691][T30777] ? alloc_pipe_info+0xe4/0x4b0 [ 653.085558][T30777] should_failslab+0x5/0x20 [ 653.090061][T30777] kmem_cache_alloc_trace+0x57/0x300 [ 653.095355][T30777] alloc_pipe_info+0xe4/0x4b0 [ 653.100040][T30777] splice_direct_to_actor+0x97b/0xb60 [ 653.105417][T30777] ? check_preemption_disabled+0x51/0x140 [ 653.111134][T30777] ? check_preemption_disabled+0x51/0x140 [ 653.116908][T30777] ? do_splice_direct+0x340/0x340 [ 653.121927][T30777] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 653.128063][T30777] ? fsnotify_perm+0x64/0x390 [ 653.132738][T30777] do_splice_direct+0x201/0x340 [ 653.137578][T30777] do_sendfile+0x809/0xfe0 [ 653.141979][T30777] __x64_sys_sendfile64+0x164/0x1a0 [ 653.147160][T30777] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.153205][T30777] do_syscall_64+0x73/0xe0 [ 653.157602][T30777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.163487][T30777] RIP: 0033:0x45cb29 [ 653.167351][T30777] Code: Bad RIP value. [ 653.171391][T30777] RSP: 002b:00007f97c755fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 653.179795][T30777] RAX: ffffffffffffffda RBX: 00000000004fd720 RCX: 000000000045cb29 [ 653.187744][T30777] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 16:26:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10400, 0x0) r5 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}]}, 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa82}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9a}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 16:26:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf000000, @loopback}, 0x1c) [ 653.195692][T30777] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 653.203639][T30777] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000008 [ 653.211602][T30777] R13: 0000000000000902 R14: 00000000004cbe0a R15: 00007f97c75606d4 [ 653.256635][T30795] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) socket$tipc(0x1e, 0x2, 0x0) sendfile(r0, r4, 0x0, 0x200fff) 16:26:54 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x18020000, @loopback}, 0x1c) 16:26:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 653.385404][T30802] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r10, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000fddbdf250b00000008000200000000000800310006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000100) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x20000000, @loopback}, 0x1c) 16:26:55 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) personality(0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) clock_gettime(0x0, &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2710}, 0x16, 0x407, 0x40000fff}, 0x18) lsetxattr$security_smack_transmute(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) 16:26:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x1f, 0x6, "0fb0145d2a8da53569af71edff9bd930c1129b4f9c166b3d175ebe4cab28d3dd22bea3bd4caaa8eb33dd140aa3ab991881bb6674e483b44bcbf96bb08647fc3ad753f8663ae27a3f4a792700b9aa486d8413c024b0d915e864ceddb983e753aa2096f8ea0a518641d14a8af2898f2f677e09172d8d6f8dd8bd8fbe00dcbc627c1f8ab3d54b226be919ed1e6ec1f4ffdd56a6cbe547eb868ae77a69ef3ecfd9c10c76a69e1d9c465a63064b3b8482982efe199b655a426e586b6b2ef649951ec69aba60b479f1d6cfc90be874af6796cf6ff89265a52d2925bffdb604b635a1801af9842abe072e3816bd99f53e1e1c18670ce4b8aca20e81cdaf0d16d7922a9c", 0x2, 0x6, 0x9, 0x6, 0x9, 0x80, 0x2}, r4}}, 0x120) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3f000000, @loopback}, 0x1c) 16:26:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) pread64(r4, &(0x7f00000000c0)=""/226, 0xe2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf4, 0x4b}, 0x0, 0xfffffbff, 0x3f, {0x0, 0x5}, 0x81}) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x163442, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:55 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x4, 0x1, 0x0, 'queue1\x00', 0x3}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2440056b35bf53d3da4b1e1d2aef11e7ba6373463632776d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e09b2685a1363043532549ea67d06394c0824e"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x3f5c13e6, @loopback}, 0x1c) [ 653.996392][T30847] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 654.055829][T30852] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = pidfd_open(0x0, 0x0) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000000)={r1, 0x800}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:26:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) 16:26:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x2, 0xcd4, 0x0, 'queue1\x00', 0x81}) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400, 0xa5) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000280)={0x8ec, "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"}) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x80000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r8, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) dup(r7) sendfile(r0, r6, 0x0, 0x200fff) 16:26:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x41020000, @loopback}, 0x1c) [ 654.403425][ T63] tipc: TX() has been purged, node left! 16:26:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'rr\x00', 0x2b, 0x7, 0x39}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:26:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x439577e3, @loopback}, 0x1c) 16:26:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2a0000, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd0500ffdbdf25060200000006001c000500000005000d00000000000500070003000000050005000100000008001180000000000600030004000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents(r6, &(0x7f0000001600)=""/62, 0x3e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000700000035000000000000b52e89030085000000070000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff18}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000300)='TIPCv2\x00'}, 0x30) getpgrp(r9) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000080)={0x0, 0x3}) sendfile(r0, r2, 0x0, 0x200fff) 16:26:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffdfff7ffe, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback, 0x20003}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000080)=0xf4, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x54000000, @loopback}, 0x1c) [ 654.674707][T30894] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 654.723958][T30899] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x58000000, @loopback}, 0x1c) 16:26:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c000280050002000000000006b2ef921f35de271b5c13f93bf60306240c6a6e150fc8554a743bd3fb499b7c35988f49d22b7b6adddec6d802ffde06da39920e134b32139128997db3577113c8e78e13a73427c73e32ffb387269dff0123fb19403c06488d161ff248512011adf79f39e7c75b5bd0f2f12ce46a79638f60a48dcbc7732cd3e99e3658e1c87ad5829bd1cf31410a059620d7e838fb722de522dc208dff152e766358dcaa95a375805a8f2991dffe1bfeacc5fe35b4268742a342830d4fe3862a905bf20d83d10e3ffb607c19643a90c1bf28ea90235081da6c522462da8856a90000000000000000000086e56687c6f406ac4fa22aea8662fc3a00281e79d683fd5a4670f2e5ea37290dca7f6885577585fcd1f170e61fdc8d3de70d73b0fbe673e6ba902f2df12c4c49c8e6e144456608e0a0a9ee7cb7ecb3bf448c9a9da1eeece7a2bfee3f3facbe3124bc9d8f74c0f57a4a186aeb290264dd96ffffd906a4b46e656838fbc118ad3836ba811854c577916fc4fee93ce1877bb1aecdcbdaa45d5f7e61c02756663c2baf67233d05fb6559e414af87b325cf945581b220c9ccc9df56b03ee8eebdbaa780b303d603086f2b0093bb5cdeff278cec63f3065492983af6b7c57e13fc538ec4363cf6733c01d47440f3b2d6f9c4b664a585277c"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) close(r0) r2 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r3 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r3, &(0x7f0000000080)=""/30, 0x1e, 0x100, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0xe9, 0x20, "dfec831015b3132072bde9feba3906ba2a48063bb129d01d673ae1ab84c7d61a067614db4324f771318af24982fbe646be480da76d7c059dfe0f788fe93887", 0x16}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:26:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], &(0x7f0000000280)=[{}, {}], 0x5, 0x0, [], 0x1, 0x2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d80200954b9109c66196ecaecf9af1e207e8776db61fe15e72c5cf4dd7cd769213b0d7e36c258870d29dfbbcdd9040d33c70cbbe859ddda67dfbdb22d73f63be292690d457e801dcacc67e2bff", @ANYRES16=r3, @ANYBLOB="000227bd70000800000005000000c402066d286165732900000000000000000000000000000000000000000000000016000000725535d8a87875af41511380b581cc404ffb75838510000074000300a784bc8315217fa5074e85b40ad462330fa639b08845134f9c82579be5f7adb5d5afbf072f0a7047b1f7504de2842ddf43a08dddc3f316e25a9cea80e244d2395dc63b2207689b8fa7d0d8849860ed1d001875d660a7ce655a975b7f49ccd837d6c23d88b97fe387849ccd037d49b90d4000040067636d286165732900000000000000000031d88f7a67f9c70000000000000000000000000000001800000013e110265508c3fc0f5b11a599f56df4d6f46ed219a46e0fa500030079692477c45eda5028ac8cd5efb0bb85a7498b0e26e1bb9835815e1cdd1b987a80b3da470c13ad929ba8dc8c6686b9a82146f8071c8ed24751b3274340dcde0f82a41d9f7d88784433910105f5527cef3083cdac8f4f8ce7d4597d24df794c1bc6e7b4bb322aefe286665d77ed1fd9a3919d6ed3036b492a0d16b06a03f2b780258b97b02a11d964ec216097f9a6e56e060166a7de884b51abd14f469730e20f5f000000040002004000040067636d286165732900000000000000000000000000000000000000000000000018000000051e3670b5aede6ccb9280cebaa21509caa3d4c78a0b6edf0800010007000000d2000300b3e116ff1093c2d896a1c67566d1ffda44e644d044bf37c9c6aee63652f0e97ab3647fdf42d8d3ba3bb0bbee50a2f7746acb01c336f01d8330a950c0dc78143c6eff15345f17a762cbf18efdac487d205d352764fb9658e5ff4ca0bcf008133c73c857097c92efb4cab697803bef2edb3ffe9ca8829b3eae4606e72aa563ee537ad96ba906c38dc989da7ed1d49e14b5a14c187636943f68ec724b55804e39e09885547c8ed9ec1b77e89545f149084c20a547ad74b781df7bb6942030a216770be45b85b7074f384319960bf0a7000000000000000000000000002e694537c467648d3789aa38ab6d75a9c1477fad0d76c257c25f50c0700ba269c1c9a3"], 0x2d8}, 0x1, 0x0, 0x0, 0x40010}, 0x24048090) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x7ffff000, @loopback}, 0x1c) 16:26:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0xfffffffa) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000040000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b63"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x2, 0x0, 0x8}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x8dffffff, @loopback}, 0x1c) 16:26:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) r5 = fcntl$dupfd(r0, 0x406, r2) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d12, &(0x7f0000000080)) 16:26:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x91ffffff, @loopback}, 0x1c) 16:26:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e24, 0x74000002, @private2={0xfc, 0x2, [], 0xfe}}, 0x1c) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x7e00, [], &(0x7f0000000000)=0x4}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:56 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xb8040000, @loopback}, 0x1c) 16:26:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbffffffffd, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da47f76d2e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a13630435807a9c667d0630000004194b5b4a300"/202], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:57 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x100) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x9}, 0x16, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400082, 0x0) r8 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="fba346000408fc1ea002799c0001c5b4c8d83ec89adc12f52617843cdc3dacdffc2f72d6471f380e40999c7bb4bc0c717c163b10a01e0f417c559375c18e44bb2259ea4a11538d6bd3b546b295bdcac0be4503b53b0231c6652facddc541a4e71f30f8c1cb653f419fc8c9e521f1ac0803f74fb5e1c20ff33f21cc9b5023c59f16d911e1b2f4dcf13341ea15ad487e60c549437daf894c61b24ee2ae20694086c653695b61781418a559e1eb50e0df0314fdb479edfb8a71e6973236fa45b6df3dc1fac0e89eaeb1504ffac1b800c72cea6cc3db5638ce42738a5df7ba01235a1f4bc0fb454775ae9655f5bcad82fc9ece4df1ffa4731897f2", @ANYRES16=r8, @ANYBLOB="020006000000fcdbdf250300000008000900010000000c000f008cffffffffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c845) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xc4ff0000, @loopback}, 0x1c) 16:26:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x151242, 0x20) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x228000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000080)={0x7, 0x4, 0x8, 0x17d, 0x6a636a09, 0x1ff}) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xc4ffffff, @loopback}, 0x1c) 16:26:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4731423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a269799188728e0071f9d1165ff9508000000bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00106d4adf32685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x200fff) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe02e0000, @loopback}, 0x1c) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe0ffffff, @loopback}, 0x1c) 16:26:57 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x6, 0x8, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x40051) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad140f43be873a250738a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbc0e71fe0938ca38df979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe3779543, @loopback}, 0x1c) 16:26:57 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe6135c3f, @loopback}, 0x1c) [ 656.577067][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 656.577075][ T29] audit: type=1800 audit(1594052817.963:657): pid=31020 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16205 res=0 16:26:58 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @local, 0x1}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/74, 0x4a) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0xa, 0x9, 0x1}}, 0xa) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'tunl0\x00', {0x2a, 0x1, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 656.666919][ T29] audit: type=1800 audit(1594052817.973:658): pid=31018 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16376 res=0 16:26:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:58 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x4}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x2, &(0x7f00000000c0)=[0x0, r2]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x202, {0x0, 0x2, 0x3}, 0x214, 0x0, r2, 0x9, 0x100000000, 0x8c1, 0x7ff, 0x1f5, 0x80000000, 0x10001, 0x5, 0x3a, 0x7, 0x5, 0x4, 0x100, 0x6, 0x40}}, 0xa0) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xe8030000, @loopback}, 0x1c) [ 656.809532][T31042] validate_nla: 4 callbacks suppressed [ 656.809540][T31042] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 656.949194][ T29] audit: type=1800 audit(1594052818.333:659): pid=31044 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16216 res=0 16:26:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf4010000, @loopback}, 0x1c) 16:26:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x5, 0x50ad}}, 0x28) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:26:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) getdents(r3, &(0x7f0000001600)=""/62, 0x3e) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x4080) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="13030000000000000000070000000c0002800500020000000000160e405a9a5b0ef4436a3512aa78d1c22524fddcceee2cd1646e7da33ca99f3a96131678c647b5a70e34ab50dfc507e61b847b5dcfe61cf25f9668e6be4860d931d23c625e34aa9df8ce13be929104002693d873611b37ebf5ee7a"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000400)={0x1, "6b616f9036f3e50d3a286373f539fcf52f52aea66f0b920de6cca3f4e5190d87e332164e626e95b59d97ebcb2610732f18d79c30ae64cfd18c004e384bbdbd8bff4eafa22931399eedbd6eabb09af857576e7c265d6b5477cd62e627795a2c2aa198c5570fc4eafad26a621f8a681d7b2a276bf6683f867edc5b68bd7c320a19"}) 16:26:58 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3f8, 0x200, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = socket$nl_audit(0x10, 0x3, 0x9) pwritev(r4, &(0x7f0000001440)=[{&(0x7f0000000080)="30100f550e1daf0a5f15f39e7bacb488eea29d4154dcdcce0cad42296ea67d5f2a45083dd7d08208a6452d17", 0x2c}, {&(0x7f0000000280)="25917626ed6edaf95a4802a3a37349a5641d75ecb0ffccd0a79923069d905a74bfedefe21e5ae91a38fc83f49d6b19227af0010b9f8e987d23f13a134c4f182727dce736058fee4003aa4d8f509f5a118b597e3f0274cc08a0ad66261be016d98490155ea3311f8e079310097e96cbffce96a7058f1cfd8ee07d46a29faa1bc3877d4a616a11096b6803e9685365fbc68a7bbc864adc608bee0cfc4d228bc7d8321310c334f65ce2dfabb408a0ff6231336cc470a35155402c", 0xb9}, {&(0x7f00000000c0)="1a7f43064e9e0825075ac1c4c396ddd22e2a94b71f24dcaa185ce7e19cc6731b059e8391819f2c", 0x27}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000180)="8f277ae2dc6dfab0f7f807d3", 0xc}, {&(0x7f0000001340)="a1011dd31432869cb103c48741a424164eb0150fbcb1f46cdb5c6d9ccc933d839bb857b6af9e6bfd9845183d9928717efa21f9c0d8c3bd15880a5ff6dd908dd6223832a9063712a2eb4e71cead5cd2d9ba76a25a6539780faae372922f0639069e98ba9010e35c9551a3352561879d1205e2cb8c1945f10052f60e04b49dd60183d99f02e061019f0a4e04fbf2a9203c7f50871e194f633ca1ebe1bd57f53063fc2d2fbed49d8d77d4dfaa98264e9bca9e8e42a7aef8c5dd57ca41a7377497cb262be161ac0ecf12c555a1a4e0a4c0ed1b51fe58ebfa5b4c921b40a4e44f9f8c5b2fec3168845d", 0xe7}], 0x6, 0x3591) 16:26:58 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a72629b2d246e1cdd4394b75bbaf486c74b4221166c2a6a649db7de6086de81bfb97fc252ecaa6171f1366c8dfc1df144a3ad165769757000063f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bf58a1f6232f91f7147fb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d0630000000000"], 0x24}}, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x57, 0x3, 0x0, 0x9, 0x0, 0x3, 0x402c, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080)}, 0x40000, 0x80000000, 0x9, 0x3, 0xa4, 0x8, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 657.042127][ T29] audit: type=1800 audit(1594052818.433:660): pid=31046 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16257 res=0 16:26:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xf5ffffff, @loopback}, 0x1c) 16:26:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000200000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c) [ 657.341946][ T29] audit: type=1800 audit(1594052818.733:661): pid=31073 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16216 res=0 16:26:58 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x20040, 0x4, 0x8}, 0x18) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0x1f}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88307000000000000006caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb5102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000080)={0xb23e, 0x7f, 0xffff, 0x3, 0xfa9, 0x8}) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:58 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c) [ 657.562270][ T29] audit: type=1804 audit(1594052818.943:662): pid=31083 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir003036080/syzkaller.Ee9Abu/1006/bus" dev="sda1" ino=16205 res=1 16:26:59 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfe80ffff, @loopback}, 0x1c) [ 657.719018][ T29] audit: type=1804 audit(1594052819.093:663): pid=31083 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir003036080/syzkaller.Ee9Abu/1006/bus" dev="sda1" ino=16205 res=1 16:26:59 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfec0ffff, @loopback}, 0x1c) 16:26:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xfff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a11ff07311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6375e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 657.903378][ T29] audit: type=1800 audit(1594052819.133:664): pid=31088 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16205 res=0 16:26:59 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xff000000, @loopback}, 0x1c) 16:26:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6e9595030000000560a400058e2f7d1ba67b4b0449fac1e11f", @ANYRES16=r4, @ANYBLOB="13030000000000028005708bf19d0000008b0022000000000000"], 0x20}}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @broadcast}, &(0x7f0000000200)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000380)={@ll={0x11, 0x7, r5, 0x1, 0x4, 0x6, @random="791f4b81223e"}, {&(0x7f0000000240)=""/25, 0x19}, &(0x7f0000000280), 0x6}, 0xa0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0x9f0000, 0xb03, 0x8000, r0, 0x0, &(0x7f0000000040)={0x990a70, 0xffff60d8}}) accept4$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x80800) 16:26:59 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socket$inet_icmp(0x2, 0x2, 0x1) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff777e, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x39}, 0xfffffffffffffedb) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 658.074849][ T29] audit: type=1800 audit(1594052819.133:665): pid=31083 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16205 res=0 16:26:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d24609a6f197e799ec82ce9e4d6de1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84a0d14e10b1b4aa48a5b1e0e212c36dbcb308660e88088a26979918871fe0071f9d1165ffef2158068d56f920f56026c471502e5372fa143d286a5849576aed6a4701212b01bfb1102f53a7f81ef064e00197030c3043532549ea67d0639d94cfafbb06bfdd09d7c73feaeb96d302db3eb819d49edc168e6f7519721e581dfd1c6437c66dcba25e72cb5d403630b98af546630000000000"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003d71ca68e1cac4cbdfc74bea311f969f93532cee801c7c011e62f0bc81cbc85c744f287e64a3fe2fcb06be1b92d91713607a9ea619ca66dba2bbeb5b41a80ebb9b2d1c471dc15b29aae3386cee22800d01f461bd976b161b6a552246a8648f8afcc790c86014f7e42fbb496183005b1f6f63b4dbf6f46e6ad3c4664089d3c1ec8beae911cbbace2ad6a22ecfdb79cfba12b9041aab9028a893d543fb22a7e7eaf9575709fac75c0087c65db30000000253003e6fff5d789f57058d5b", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) write$FUSE_STATFS(r4, &(0x7f00000000c0)={0x60, 0x0, 0x8, {{0xca7, 0x1, 0x4, 0xe2d, 0x5, 0x8001, 0x7fffffff, 0xfff}}}, 0x60) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 658.302405][ T29] audit: type=1800 audit(1594052819.694:666): pid=31120 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16189 res=0 16:26:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa0000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x2, r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280)={"9131c69c272815a79f7bc5d400ecd937b2b4313de3820925d1e3711ed97ec21c318ad669fb1c3f78932fa884d564331ed0215c7124f638fb7838b36cc6f5ea428b73852502d22b41adaf1657fc7b781f9d2521df602f69bb5871f3a8a5f67097b8c0074d3cec8be0011598c659b13e417c1558beb743c4a893c2f4c9aa8eff55d405c61af7ce4e8e31dba50e23e1137373edc26e46ed458c187c987d0835dbe8d121b46a63cf907d051a45749e5d60005f0652d51cc1107203993ba0cfa804604658a96e9a9e821b4e72383785779cbc3b2d09c6f3a3a0e0289a44a6789629dd6e627f23afcb7701a40b296ce3b88d7a1b0352601dd7235beb66c9dd0d5acad1f5b0bfadb0b6a6bfd98c9e54a4f574a11596921c46c41ddfc2d0e1f88ab7368539968258d39d8c1e81cd903a19cfa1e0ffa2d471ba3cc4e3545dd34eea31abccc154a90a5984f5bc3bd0ac466be818b9c79cca6ab199cdd4ca5e5dfb7f3e48028fe630532fdb784c947a1370bd3594f5c58e9b6f6e5d48ccf31710e9866c46aa1999f0ad7c904c5e95b026aaeebf292f11068059851a20b4821993a6ac54a1447dfca0074dd580f9d7f045afd5be3ac582cbad810431a1470c77d3e3206e5a9e0ab00b7dcfce2a86ccdbf8a391f1bcef5edd8f1f09debb79fc41b458b8855f508f712cd384e45a6feb69f8cc0b2b427dfaf37a2b280b7c86cfbcb1762d19298af58edf2cbfc88af3c91883e7aef8c81e5db4ec2e04f11838822e509a2f56032d055b81d8661fa81faa2c87eb2d265ecc357afc8f188030ebd1f5a0cfd6f9cf27f13e6e7cd9fcb56bc3b97e11554888a20d45c4bdf2dae6b066c40025b5180caaeb8d38f293c7416c4f90335de75875fbb7c02313d6390049300598edee7f52c6809bf8968badd6dbfc9b9be64eb98a17cc750b14a3b58cc496481cec9fd901b5a2972b822cb05ccd6499718f2125743f6a9fdb0137b690d96bcb99eaa64655f2858918e96d9012a25da53e2c955fafd6b3636ec2c09377bd48c0a4a231914791f425f787ed586dec55a14fd83acbf8d33e51df73c1c97072eb84e70101e713139eae5edefbb98881a1143050d48d1a88904864fbeed03b8e8c04b9528fb2590f77062387cd860d67aabb65d612cc133e5b0e22757b07ffd1baeed200825704cd2fb49dac5b8f81d5f6fa6184876374ea2b449f8c53fd57a1d18c968c6c201a7d53ccf375749999bf3d0518a51a29b921407daa7fb6b0a6033c3088be151edeaf913a18f7b062578217c03fb2bc90605269540cb2d350912a39cfea8517fa854b6b768065999871c795428e87d5b893c8516c02dd1cf984262cc195f0cd6a2803259af30adcaf0324547e3b56203b3c1a8021f88747b55c05ba6d8fc498dc09c970a410ea530cf10c6e6f6a93615ac05898747e7ca20d0def06e847fb2cdc1076"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:26:59 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xff0f0000, @loopback}, 0x1c) 16:26:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0000004483000003440000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:26:59 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffff0000, @loopback}, 0x1c) 16:26:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1ecaef11e7ba6373463632745365e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b010500000053a7f81ef064e00197030c9b2685a1363043532549ea67d03c"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:26:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000ffff", @ANYRES16=r3, @ANYBLOB="1303fdffffff00000000070000000c0002800800020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 658.534170][T31138] QAT: Invalid ioctl 16:27:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x2000c000) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffff80fe, @loopback}, 0x1c) [ 658.753890][T31155] QAT: Invalid ioctl 16:27:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000400028014f63e4d24b7c30365e1484bf450cc65f620d75e7fd7a6b1299c0640a7eac1bdb906fc36a0ea6c6ddbf61e60c4a57a7bc05628455a817ca15115a0a9bb0aef4f93b43d07316d0d10edb74f34ff217610085393d2c0eb9f31f5521a5f4c6cce45289b521a7442f3690c38bd5828142749c3b05c3fe0df0500000000000000f6efa68e5a"], 0x18}}, 0x4010) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000040)={0x0, 0x80000001}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40900, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4051}, 0x44) 16:27:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0x7fff}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe, @loopback}, 0x1c) 16:27:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) ioctl$VT_DISALLOCATE(r2, 0x5608) sendfile(r0, r2, 0x0, 0x200fff) 16:27:00 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000280)={0x7, @win={{0xfffffbff, 0x800, 0x415, 0x2}, 0x4, 0x4, &(0x7f0000000080)={{0x3, 0x4, 0x9, 0x4}, &(0x7f0000000000)={{0x3, 0x80000001, 0xf25, 0x4}}}, 0x1000, &(0x7f0000000540)="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", 0x6}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x8, 0x400040) getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffffff8d, @loopback}, 0x1c) [ 659.164426][T31180] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0xfffffffa) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffffff91, @loopback}, 0x1c) 16:27:00 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:00 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffffffc4, @loopback}, 0x1c) [ 659.398132][T31192] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:00 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f068000e8fd4daaf752eea2447d56b35bf53d3fa4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb3140e88088a26979918871fe0071f9d11655372fa143d286a5849ed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d06300"/194], 0x24}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)="dcd0e95c4c7850f473ee7de0a20fd56ff04f45ca35910d8f75b28cb735c4c7ce0636bac997995cdc33cd9658651c") ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 659.444272][T31193] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xffffffe0, @loopback}, 0x1c) 16:27:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc200000003106c1f9aa20ca288c11336770a1de7d23b12ddd413de6e4bddfcd1081c3fa08698fd06b5e5d7c052102000000000000005358c0b5006dac1fb3e9f8", @ANYRESHEX=r6, @ANYBLOB="1303000000000000000007000000775c880a2ddd050002000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents(r7, &(0x7f0000001600)=""/62, 0x3e) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:01 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/33, 0x21) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x80, 0x20, 0x9, 0xf8, 0x0, 0xdd3b, 0xa0100, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x4, 0x200, 0x7, 0xf, 0xffffffffffffdcdd, 0x9c50, 0x8000}, r2, 0xa, 0xffffffffffffffff, 0x9) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0xfffffff5, @loopback}, 0x1c) 16:27:01 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41c2, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r2, 0x6, 0x3b, &(0x7f0000000080)=0x5, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) 16:27:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10aa, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001580)={r0}) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f00000015c0)=0x1a, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 16:27:01 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x2, 0x4, 0x4, 0x4}}, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r2, 0x10, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2000000}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c) 16:27:01 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x32}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '@@$\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffdfff3ffa, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x6}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:01 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5}}, 0x1c) 16:27:02 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x6}}, 0x1c) 16:27:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xd0, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x42d42, 0x81) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x63, &(0x7f00000000c0)={'macsec0\x00', @ifru_mtu=0x3}}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x7}}, 0x1c) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x8}}, 0x1c) 16:27:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendmmsg$alg(r2, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="90ec9f65da6fa44a5ae2321b7a6bf73a7a612775402eed9506651f00ed0dc72b7b88ffe9d157f2d4533b63fec411234edc8f4231463f5f3e00b172ba770c2db4e65a2708cc8bd9f26e854ec14cc3001d2c4ad98bb175670bee8105f02d03ccb9785afba75ad0a053a43840e6919f8d2b334d6d895589a7f7a2ae6c10d9c7b5a5aeca24ac887bb3f823412c03a356d614d0444f935f641e9ea38b1f054627da178aeaf12206f3120b50146c886dd253750df9590824434c584eb93a0269169a47fd13807a7d8c7c1e6151b86c314ebb8333b3d6d7d0fa49c25b5f51c97321dc27c91461c6a9de4d17", 0xe8}, {&(0x7f0000000080)="f0ff08fba57eaf59657b1c317acdfbd5db8b51db656fdbe67531e4da4603204e08860cb922f4ca076f1ed7fe8c15dc6180a9ed1fa00a204f8335a0582eaca24f308712bd6a301b72f85ea955d970ea8144af3972c88630ac8e00e295fed0cae4b2fd58c12d12b995eb9ccef91ea4105728efaccf7a42c8abdf60d21d460d5f8ac1b4e5f42741513bf83860c4876c77d35b4e28c366c0d83504e29de550b0359078d71b", 0xa3}, {&(0x7f0000000380)="5b741e2756c441cf6a72481ac395499b3bcb9548cddc21ca50d67a3a9432746ef82f61b923b5da93f1d31865f2bfbf785a8ef49704db91700440db59ea8e173ee0aef024f66ac7f05b09b93ca7724116058749a51189e85c7482eee2af83a00a8fb94fffc3cf8943de3bcbff553804f8fbbef704091f7fd8691df6149d67fce69a21808ab3324e353eadfcdf73a37899c03f4828da37060a7ad203edd8fa6ed50d0b63b55147eec33423355568", 0xad}, {&(0x7f0000000440)="159686bdb0a63a67e7aca4ad58a5f700946580f8a079aa18ce41273a1c41521ab11f6f5b41195301d72cd293e6e64adb693dec0d4e6823ab2d5f78cf7b116fb041", 0x41}, {&(0x7f00000004c0)="2a3418c2d076976d72779ff602097c4341dbe60122f0088404d0eeedd56440a9004832c61e2cbe0b1be0c29474c77c0bb0d9cba2cf41037e064eaace6a9f893159775a13d3d764b7f21ef20de6e4e47e3ffb7e40dd1519a30e903ce1638c366cd8ee8e081c5ead0f13bb43866599e6adc4b02d747c79c816bcc70d8bfbb1bf4312cf1f9eb066a99d52cb45fd5203e23a51616d39126b870cafe5640f67159f0c06d194a0eeaadf4a9af7d72c6f970f43719d92655c444525caffc48336d4b4410369969c6624233d510d70b99b7b12a2ef2a74363dc237f589be15d2e7099764d3e67cca66d6c834f33e351d21213e475acd2f306258d6c0b286f06a2bed738d667c14c6fa5ee68b8ce6428a233999b5a504a502441526d0df3bfdd0a391095ed93facb0e6d5ed604632e3a783c1010fa21fed431e461b6adb95228a4054274f29f6e72a2d90f6e9722e8ffb0a63d7eaf6e1e4d1e62f268d7b59decb43eac682638fabb3d056ec35aaa13e975681b48c301abef87b657970a45d577f52fbe2b489e57a7e4af6b45d48313605ba5d6be3f8ed621171c8cb9b5d1244a08c469be616e2d27279eec5729bc62445be573a9576cec1efa9a7e786bddc0ddcb3b93d20cd5af906e74b26f5a86a09533c85d378118cac75d83124787556066b77927f1bc16e03de5334d7d55d85a4aff467944a96211cba7863b63bd76cd8f55c6a49187e60d8aa026646afba215cfd768ea3c4d4544049ea30b34f7d96285821a9f6495ce06c8cafe8c37e76d63c92362489aad883577bf20d0f09a2994c94c6f31c4229f620c570f0da015125708cc82c6275b74ca2148aa56072fbe2ded13616b3021e0fa4b5487d9c99041b50e0d5bf2e075e4a90cea3d8dbf005988e13fb962ab5d563e1dd243970945066f1cc46ce07928d548749bf4e75bbabf300a0a4448fc55a530135e9d680beb94f202a8470c4dbe29422af879291d402d7a887d1f4c3128304d7de4d56b6fb42016372759a6601d0face7580b061e3bdb6f60505fcc8e647302a5cdb81cf7643bb53586f5acdd07d2fa71649db4086bac2950bc494749a1c2ac10a6558ae5133af98488d6badbbb511c534ee488c10ae7fa493d12bd0a62e6bf1a66e0d6d055ded4fc3d3334ce574d016aa4fe7de4c3c8ca9249bcd885c91544ebe51ba410348d7b76eb5053a77105827831d47b18d8741909b7a3bb9c8f2cb129d737130ed583e6d020ad0cc5906c312e8ca6e4e7bd402ecf471de1e07460bfa76a391392123e84012d4fda6cdd4c2a700243fa44c2973f131206e1e3089757fb4dab538e7e93bef0a047c2e86a63f25e8650f63fb18981b63144af3286a8e47f20573c83c75406ffe088681f42d42fd5243c6c65b589981b56e584eefe74a78196c340daa14f4bbb06370e0c1d3a9429b25a71c2c89875bdf9f0b41e3b24fa120040f4ddc4ddf075363fe29eb69dd1a6ab24ddf6b2d408c4c01cb8c7a15af17ad80153d347ab8d2e119a5a3e132dbe0c9d89285e35b6358c756524f0e5477ae6ade26bc3bd2e13b9d8c2f181f7dad0fc62108f6197021cd13d9ff1db9d7e90329e963f66baee43f062a1d008e1c3215fdcd27c0ad8381968eab011a29397350c1d08eedc45211942318fa89f78b9e86ec84b39adbbb707d0705f13fcfc4f48818f1fe41f6729a00ba5e82e4d57d2c8909593a2834c9c80c2621b77e4d954af46d6601a968176978f02343515173fb5cebcbe164ced504536b94333c56580e1f218cb45b17c24a66c88476eadc446e943867e2efb89e159460f5f2363a14d5df2b72a566d67ca9b1df5064e62478d4ff29b396e34fb4f566d9482711adf040bc68c16948216d91b302e668cc5c75e425975de1f8fbeb71bed8dee28beb125d38bc4aa709c99eafbcc8222422cc3dfb8df8451fad77fe68ed003200ca344a3fb8751fd05929c9086a5a7f86bbd3cb9c1ef1717574a5ea53771132fac42efa0dd9830a3b2c1e9bd34569c2f8e68efa4f1d9fa8afda2a50fb3530f0a1571a4bd95dd8a7c6b7e3b372de330c3f685028eb78a55fa28cc93702367af6184ad6a190c9fc7a8a27807237ca16f7ee118511a732bfdbb47d7d6a035de9ce424a985c6d71007c040388b6151628683b011019000f43613001848bb47c8636a2a67351c3226eeea0c9d9f48d2098dc2379dc7a3abd443ad5a17e6e970dc629438c51b2bfc7059d7cd3589023f36f60c91b3fefed92002e88c4a1bbee46215a3558b3a7edfd92cc6a8b0defa6212148bea35f9554f95d6367d39251f98e5bd46307d51cdf1c920893fbfa5705bb50ff5beb331264aa6ac2fe3c876a55546c260b01d082e24a9e06afaaee5ebd3490b6d5dbf70adad7b115901e8882f49b9bbb12063b06a9b9fbc665ebad0b8c99c16009c0d4c85ba07fe09ee027048086b73329f9403a2b156109550e3bad77096098f6a76708b68d97233b38ab0208c6761711174af86169034dc978cf8eff2676e45839d637e35af6b417e0bef8341d1b1aa80ac605a1180042a226731e8b6eda091a7823a0dbcd7ca916d493a100b442505a710e276ea72346e43db8e8e68731097b94004c0fab92e6024aa85de48e88a39c20744e0f0f1eb58a9f87eb21b6ca9744129c223c256574bc232923840717147ff9b834757f6b03ca3d503c03d8debfbb8780aa1c08cf29ebe3afefbede04771109db73cfcc6bd30b1fa9181d573bd4f26876b4a87aa780ffab95601c95127242c1ed54429721581e5abc373ebcbdbfdede443694a1ff1a73dde915f88dcbc12a3d0a1381d0bf4f39c8a9306fdb053eeefdc4dc581d87d77dfaf98e24883b5a5c25a175e23a98d25059d37f4771886efea0119a150011b328f3c9cbc42f17173b7385af94bb02bc6bfb9331d768295b83f933b17d4778a2ce6c5e75540564f354f11ab369d84707d19646ca6c17ab3061e082b55a2e83d7c462a8bc45d056735413f16dbe0f2797e98a01be740cf7c3a4ad39745d52714fb60e2b3c67a8ed6d3eb8646045ab13053e9517b7431de33b8d5b73f2f1baba41a448abe74ac902224c0c3a3f7121a54bfc4473d3e32d3ece9350f9c805cffbf498acdb985f3eb1702ca61064b23b47120b0c9a3c813eded116a256424e9ffb882cb1abb6c6999121c7b3fb235227a992166e34eed1498c27ad5e506fbeeb93bd8bc032fe85db01113fbf80a727f72436826c59b6c3b43f1136532f7c4c935029f1d9dbc71ae22d9a7439a6ba5410c6779ed5fe5565858f21d7103be04f139ba19c93ff13b78f9b5355c3335fc7df51cdb00919d67fb59d5b9abbfad04101fc823f7c994e90e22ebc47acd8e31f5d7c4c5093f0a7e3bbb5aead2b4bd4c8b5c43f77a88235db8f269fce6ab3db8d5d9513762a2db6aa42b207e562583f2dc15429dad136186b856e3eac9c82e29a14009e7f5d31926e7bd37eb64c5949ea0408a796a4a157626bd0dbee089f08d8248585942097fd4e29d6f582c9c94d8917af0335352f1e4398535dcaced6cbc1b9a2c5c57ceeae8fa4594ca9475d182c22509575c55ef2cdd5c09e3088d21f3c29bf9edd34d95055c0aff47ab5732822ce7723e118cc764cd62782d224a871136dec6f83ae101a84d7a20b79b9703a5c532b3a5587eaf7e23047ba5ee224bcb10e62d56a45c36fefbdcd8a5019a08c7c4eb7cfc8a9983e5fbb10fa803b31dc0bd9d44ddb13fbe0c019502d5d5947ede43111a53f195fb5d7fbd3f12132dadf90ca71303a0ad95a9e05ebaa98021c302305ff647fd5a082bb0f3506f9ff16c21874c926c0209ca32f17b5d01e2e52dd111decc400271a7663c4ee2892a8ba1859129bf23297631664592f7588287dfc5b49733b94bf5cffa53c9715aee7290ef89d1ded984ded733c27d3e1b93dc1c8857cfa470e7164387892c6a559e387cf3ad16e4cd9e99841200ca454ee2951d7ef371d574ab8cc388f0731db9b8b19266369e083307c554eb42ba73d242966f6110ef618202f64d6b315f969be75dcc36106e541a88975bb406f58f418ae52e2a844ccee969d44484af0cf0c49d1c1c783a085393c21605bf29ecd474db0b87d6f5b02c526b7da16c3edb3c56703139bfeaba8af7a3e6fc43a671caa025d1329f22c6c0dc33a1e91e93a58406dcc61e31074d3b06d99ab1f37596ad0c2f3d057c315f708a25a6f2d855dd3fd7cf612713b8d6a3c58f1cffd3219739b53dd7d82cd1d51139ab4cd3ea58bf9fedf3b040a5af05de965c175064158447d77062657d04dc7f7bfcf6558f8aa66807d3c1f5cdd851a7aa43f04d2b34c107df1b32d72d3427904f17b40fbadf0e7925c8e3229fc74bdb178e1b51b6265fcb3a464d8a33d136d16b9609b99e70889710cfaf428afb4d3bc950edef37b0d61a2b01c8d08e5b19b5b07077c4391000d887ceace8e0c68e3a9236fed9909f9e549c2bdf9e395fbc466510897ac311a209f6bf622cceb5bca867437d15eed65f92d7ed83d6fee29e5fd36653552f581227b8d2619c4385501d65387a90e4fb6c4a95a0d58dd31c7439b5906d70bdb4854eb0cf3cfdc309863d31c9e3a3046d68b3156c3e4f6a24c32aa56b8a6a7f8060a94ce2ebc0d4d3f4d8b1e740f6b4491359100fc6c270f5a54ddbe05443116775e3d7c8dc93fcc997388185b72946fae7a84aecf193079c94a1ba1beb66897a275a226accc86846f35ab9b5591a554dc6670bbd98a8d726fb05170d4e15b57fa7aab9ace72d0415a000564a6d3d7c0bbe942afcec379a4aafbe22ef946568542b2bb8638ebc7da54fe7545a0489c4f3555fcb2cec2bdc62abf2d61efa87ca03ad580d5dce35d4d767ef4e3a7574cd7d95745c8d2ec33dae174ebb6d80d8574e7cfb7a25b9b9f76d46b8e87ab2175c24d763a2adf09c2090443987397d0f3fe1ec30d7a1cd4db7eb6007fbdb961caaaa88fa29bc4713e37335e898bf6b4fe1dfa9bf334695fe2a14afbade8c67ce10f15b00cf1e158af3ab94d11c53d05f8a59cd1a25d61df7c9ce20ac2766a257c8b804721304de48d55c3a216e28889f8f243abf67bc04054bee406a30c71bce8810b3dc980a32e99a4d682cf60689437304ddb45abbfe4e57dd0591613e6db22b39b77f1b2c125431e0952c0d5caffcc81273b667ecf2aa0ffbf249f2132ccfaa396c0a46eb3aabf0a5358f0f0869bf68d36c8b28ae4f7bf3183db380f170b0be29dee7ae4ad802071ba8c37557e403f54604a633fbdfb9ce7ae9d0afa94cc8992d68980d4306381511130729503eeb276cfd6f225f86d152aedae67086131d9ede36886ca740069d6421d5288556593e4ca47fb98be905c9a02bad2c05c55a26416271acb72d94e0c864831121e18726231903e330ba690053b90a0986e4b55ae69452cafb63e1143e07e63c84d7500c4df6b5315ff291525b896beb41db8cfce7e7401ba60b7e2a0f18e5d5bb319b4ef8ba00cf73cb17bd9f261a0446fd4d8c865dfdb4117e7f43fd2ad181c5717f19912d9f47f7b01f1dc91926a1b475e6f7afbabea359800a46a4adac65dd79a649c1839e6503a3a2e2e3ffff445822befd3f3a6838c15726a2fe1d54c0cf07263055c498948577ec27b72c0f1de295501fa3da3f9320237a046e390cc0441eb52cb45910fb8c0f73ed54f867513de9f3ee8cccc89c1e8b5333fea1a0f56b0ddd213c2643d62add24de0553701f9e0a23d6c3b1010ce84f26b3e0eed70abcee2ca8933ceca7566114f227815cfdd3394dac0d96cba1d3cceb09549d40438686249737276c0488391", 0x1000}], 0x5, &(0x7f0000002040)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x98, 0x117, 0x2, 0x84, "4221b5691cd6ca6a71a96b1a42582d9b9e7723d89428c99f9892ed4feceb35260327dd4a677a749a083d3c219483d64994248341d3a271e1330941630857b47fa875f2a44051b326f227ab75edbe8870ede6381ac01b70dae2b98a7fd4de05b10f5f5dd9b95b3dae39524370faf03a88f7e833e71325ff7c4efb4b6d9a9ccbcd3295bbdd"}, @assoc={0x18, 0x117, 0x4, 0xffff}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1110, 0x4000080}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001540)="b0a653762d2754fee0f2d633c331540bdb9334070d4947b525fb0f99b40604f317a4040be951b571e48be7e203743e6b9f8658c8eac8e0da5e4b5d0f489e34e3d038ddaeccd61016ef9754eb356f2458ed94327d965275c2db1fd403432184db58f91397792e0c422a36d2a811ee3b87caffd1000a168828d7a6850cdf9f66aea4e0ffeb66", 0x85}, {&(0x7f0000001640)="1590109dedfbdb323902c25ab1a3c18f03098ee6de8938bb6440ab78b43ac930eadc0d61ecf9abf9239fce8fe36055866be97bb0f20d1d65c477f0514cec732eaf317921813d47b77794c3a9b78920c5d893eef11e0606d5f6c757db6142ef17e3011be32e1633", 0x67}, {&(0x7f0000000180)="6dc1a58f6b", 0x5}, {&(0x7f00000016c0)="195b00179005618f159d066fddae1d01a32a08ab899a6f72e7", 0x19}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000001700)="9e9ddb3856a9202d57988f29951455827e8727a5a335a50240c85dc2bd7387acd42f1f7466952759fd5f56571cca3398d93431a914da1f00bb4bc658b0265febdea203b8ac01b9592a85f6186dc4c67504719922fcb71af58191bec46298998a0f534bb2284ae267162b39849940b71f71b1eba39284aff95245df3a7eb51da6bbfc0169", 0x84}, {&(0x7f0000001a40)="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"/431, 0x1af}, {&(0x7f0000001840)="d36046b19f59413b93e27b44b951b6b46e86b8dd501ec56d6954e45b221766a5dd4076c355faa6e2e4e6e94ca65ef24a25780875bb91df95b1f0a9955adfe932e68bbbe6115b8d397d4c82ba716a4fe33659e42d41761776cdc2b7b05a426630575c02cdb2c1a10f6ec49bfe457eed213b02db938282f77d217a3a9b3fca02842ce210f50b7b8429301756069aa7b97f98b3f35ebf38cd6427", 0x99}], 0x8, &(0x7f0000001980), 0x0, 0x10}], 0x2, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x9}}, 0x1c) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xa}}, 0x1c) 16:27:02 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/59, 0x3b) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xb6, 0x4, 0x0, 0x0, 0x0, 0x41c2, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xa6, 0x3a5}, 0x1001, 0x0, 0x38, 0x0, 0x10000000000000, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:02 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0x10000000) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x6139, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x151643, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x820, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf}}, 0x1c) 16:27:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)=ANY=[@ANYBLOB="bc100000", @ANYRES16=r3, @ANYBLOB="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"], 0x10bc}}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:27:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800, 0xffffffff) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e20, 0x1, @loopback, 0xffffff85}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x18, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r6, 0x3f}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0xffffff46) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:02 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x54}}, 0x1c) 16:27:03 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x5bb2c3, 0x80) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 661.615805][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 661.615812][ T29] audit: type=1800 audit(1594052822.995:678): pid=31306 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16380 res=0 16:27:03 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x58}}, 0x1c) 16:27:03 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:03 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x810) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:03 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x801, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000000c0)={0x500000, "16b58876185f0870d24a7253a019ed412362fd7c44f32b271c018e5e46f83343", 0x1, 0x9, 0x4, 0x10003, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:03 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c) [ 661.756580][ T29] audit: type=1800 audit(1594052823.055:679): pid=31282 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16250 res=0 16:27:03 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:03 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x1f4}}, 0x1c) 16:27:03 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x218}}, 0x1c) [ 662.229538][ T29] audit: type=1800 audit(1594052823.606:680): pid=31338 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16384 res=0 [ 662.378367][ T29] audit: type=1800 audit(1594052823.756:681): pid=31307 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16216 res=0 16:27:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:03 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getdents(r1, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xa10000, 0x90, 0x22e, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9f0903, 0xa12, [], @p_u32=&(0x7f0000000080)=0x4}}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000280), 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=""/180, 0xb4}, 0x100) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000580)={0x7, 0xffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @loopback}, 0x34) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:03 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x20, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffff315, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x6}, 0x6105, 0x9, 0x0, 0x4, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:03 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0f0000000000000000000f000000080003004b", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='vcan0\x00', 0xa) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:03 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x241}}, 0x1c) 16:27:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x50300400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c00"/26], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 662.602214][ T29] audit: type=1800 audit(1594052823.986:682): pid=31332 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 16:27:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x101800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) 16:27:04 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c) 16:27:04 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2202, 0x0) sendfile(r0, r4, 0x0, 0x200fff) [ 662.687589][T31368] IPVS: ftp: loaded support on port[0] = 21 [ 662.716726][ T29] audit: type=1800 audit(1594052824.056:683): pid=31366 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16229 res=0 16:27:04 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3e8}}, 0x1c) 16:27:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setns(0xffffffffffffffff, 0x10000000) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 662.849838][ T29] audit: type=1800 audit(1594052824.096:684): pid=31363 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16255 res=0 [ 662.960989][ T29] audit: type=1800 audit(1594052824.316:685): pid=31385 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16382 res=0 16:27:04 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4b8}}, 0x1c) 16:27:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) getdents(r2, &(0x7f0000001600)=""/46, 0x2e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 663.097414][ T29] audit: type=1800 audit(1594052824.456:686): pid=31386 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16231 res=0 16:27:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000015c0)={'lo\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000001640)={0x1d, r2}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x2, 0x2, 0x9, 0x0, 0x41c2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xdd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x55b842, 0x1a) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:04 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setresuid(r5, 0xee00, r6) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000400)={@hci={0x1f, 0xffffffffffffffff, 0x3}, {&(0x7f0000000000)=""/60, 0x3c}, &(0x7f0000000080)}, 0xa0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc86b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a01010000871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f51a7f81ef064e00197030c9b2685bc363043532549ea67d0639f67f45e5a5ae5b596e0e55a7c04602a13cb1ee6d738b1016b4b3fa1c98748e4dd04000000fbb4"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:04 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x500}}, 0x1c) [ 663.230506][ T29] audit: type=1800 audit(1594052824.536:687): pid=31410 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16229 res=0 [ 663.464007][T31368] IPVS: ftp: loaded support on port[0] = 21 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x600}}, 0x1c) 16:27:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'ip6tnl0\x00', {0x6}, 0x6d57}) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:05 executing program 4: syz_read_part_table(0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="0200ee7e00ff01000054d4f1638d030000d1cde3acb904140000a440f03562e3493c0000000000180000010400000000002b127d370000000026cce8cdf4211971939b703bf5816d0a73fc4d4cbf0ae2e989da2249f0b10500b6769aa0bfac7229816e4a532f1c0759b32bbc86d7fc48aeec8815e74317ead4c78b", 0x7b, 0x1c0}, {&(0x7f0000000100)="5a59d82b498bf64d9185a41f0ed4c26bd61c7b5088390e93ad794da3068b0087c65fb79b2430b4e2dcdec4964318895600c5c7137174402ff12cc1e4eeeb998839d9ddc0afe750d6211e839ca4e24a5129da0814e84643089f06bddcbef465b31412cd138ddbcfe190030f9e110efb87aacb14f096b4f1dc6145533f2feb28a4bdcf2cf8ccbba85f5427a6b9d6574d73212e63902ef1f2216c6e8fded7f27a40f1e7d0bca126afdbc1cc54d7f366a965f434e429f169f5c95be9e55915c636", 0xbf, 0x100}, {&(0x7f00000003c0)="275165502ddee3c83b8c5938c098eede4efec934ed4413cc6ac5033bd76b1104d85dc4e76d4be84ed7d3b455ee0f62fb4189f6f3cb5efb5a948dc3395fe14449ef723fbf43cb1b6eae671a4ae863ea78fdd97ff524c24bae7d182f07e585723f95cd6e1b66b26f39436c2e5724115afd92e889f3111506a30b4b35fc91daa212e47e2e9daf8e0e8803bfb6e727d97442e6a50c61d5b8c7c78e84b4c30518c6684e279c17b522ecab1146ea68f935c42751f9a12e0bec2c15075653b7bfc469ccd5b2dfb5e97730bbc5bfb1e465c60a8879b5c93630ebcdaa1f21be8fa8d2186ffc3379598545f90ab794bdbf3f3ac7", 0xef, 0x4}]) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d06300"/197], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='L', 0x1}]) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents(r7, &(0x7f0000001600)=""/62, 0x3e) io_submit(r6, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffff7, 0x0, 0xa6252d63decfe2da}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xfc7, 0xffffffffffffffff, &(0x7f00000001c0)="b894dfd3bccd5e6ea6632875ac2091e71a38a5baef48311e703caa2dbf0cf5b059b14b818945e1356ce50d91972a2412f31e085c7727e657ab7ac36122cf43f21a9fb80d69a7ab6e1c1415d36352f3b60069cd21efc2d11c", 0x58, 0xdd64, 0x0, 0x0, r7}]) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT, @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xb31d1c10cd1e72d9}, 0x40) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x48, r2, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x48}}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c) [ 663.879074][T31468] Dev loop4: unable to read RDB block 1 [ 663.888755][ T21] tipc: TX() has been purged, node left! [ 663.893665][T31468] loop4: unable to read partition table [ 663.910961][T31468] loop4: partition table beyond EOD, truncated 16:27:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="7b1a18fd855c0192ebd1b0c61b48d7d886f9b696d74eb4537393da361cddc55356e3d9b1a4968cd48aa0381df211e2ac4fcd594a81c98629a238e23acc8965c59fd4e6569142ea15cfb84a639464c8a5edab2ec5185e0b8d06db538b6f914eaf81926741c25c9a45cadb37089a239719334f5ee952c605ed4a4f55d8024dc85e2ef216c568d25956de5b5e95c4d5b0bfa9f5a9cbc3937c3aaef51010ca45e2a540053d6956c063b167272a53fee77ec498777d282459eaedf269cd4eea442d"], 0x48}}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000002400ee1d0f00"/21, @ANYRES32=0x0, @ANYBLOB="00000000f1ffffff000000000a0001006e6574656d0000001c00020000000000000000000000001000"/52], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800000024001d0f00000031f3d0ffebb9e59cc343229de2f429c925a1688be40800000061e17d1eff4788eb4193529c3c3111b199920499c79d2ebcfe3cb57b39c0dfdf", @ANYRES32=0x0, @ANYBLOB="000000000000ff005800020000000000000000002000000000000000000000000000000000000000000000000000000000000000f4f0138000"/96], 0x88}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x2}, 0xff}, 0x18) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 663.930893][T31468] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 16:27:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x404200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone3(&(0x7f0000000400)={0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x26}, &(0x7f0000000480)=""/165, 0xa5, &(0x7f0000000200)=""/90, &(0x7f0000000380)=[r5], 0x1, {r7}}, 0x58) write$P9_RGETLOCK(r3, &(0x7f0000000300)={0x21, 0x37, 0x2, {0x1, 0xce9, 0x8, r8, 0x3, '\'{!'}}, 0x21) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r9, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x900}}, 0x1c) 16:27:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000280)=""/161, &(0x7f00000000c0)=0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "76ab956bb4d63e41", "6f5056c7acbac3b790748388d65294d9", "dd6358e5", "c5943290cdc75990"}, 0x28) sendfile(r0, r2, 0x0, 0x200fff) 16:27:05 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r6, 0xffff}, 0x8) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) sendfile(r0, r4, 0x0, 0x200fff) [ 664.193174][T31498] ptrace attach of "/root/syz-executor.5"[7357] was attempted by "/root/syz-executor.5"[31498] 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xa00}}, 0x1c) 16:27:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x0, @remote, 0x4e20, 0x3, 'ovf\x00', 0xa, 0xb6, 0x18}, 0x2c) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) msgget$private(0x0, 0x10c) socket$rds(0x15, 0x5, 0x0) [ 664.276577][T31498] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf00}}, 0x1c) 16:27:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents(r5, &(0x7f0000001600)=""/62, 0x3e) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000040)=""/42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r7, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008) 16:27:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x5, 0x5}, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010f00000000c4ab000008000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x98, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfbad}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffab16}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44880) 16:27:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a8304004f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e001972d45a36185a1363043532549ea67d063000000000000000000009aaa48e4e372f9a0f60c44b2364ea9ef9ca074013a8f"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:05 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x1802}}, 0x1c) 16:27:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x10) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 664.592048][T31527] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x2f, @private=0xa010101, 0x4e24, 0x3, 'lblc\x00', 0x2, 0xfffeffff, 0x14}, 0x2c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:06 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x2000}}, 0x1c) 16:27:06 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0f000000", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)="2afea2e46a3077c1f05376296419509884c122774a9aa2015ea6838fada18847ddf2fc917258d44cc588515c2ebf848d177df3e0cbd637d4ede74de87a5dd3e07477d6a38d2afe12dfbd3a343e354b0c51e5b658c510fb014913efeaca3c08998689f6b47094d780c2764a165d5229ea2df779765fdf0977a3a39b6faf8c82d67b58cf084028f13cc7a33502dec7f27c3c268142ef9b10f2b5a7f70f2f23056cb8f0fd03d9429a5121ac2870fbbe7e8e3f66653722a3740b3394c98514406cc9e39459d9fade4f5146bd2452b179a588bbae83acf6d5fcacaa0f5a64d678405c5f8e480a3632070e29e31ecf0895", 0xee}, 0x68) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1df801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:06 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 664.786705][T31541] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:06 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x2ee0}}, 0x1c) [ 664.877196][T31541] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)="643aaea9817289475ec0360be705d4df1f1a90b2ae719b30fdaec10d116beb47763c02", 0x23) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c74c0000", @ANYRES16=r4, @ANYBLOB="1303000000009e8503e3d5e7a6d739b7534a3b493251ff9b773aca8d4a1457c2f37d0e4e9be685f54a84a52d78d30b3e59849fb11df8827138c9d930e4a05a5267abb688532287796a9cafcf955999f3dcdbcd24bbd8f6fc48c66c842088c59fa965fd573a4a018936e16fa57e7f50fbf1bfbca0338bb9ee73f37f511df4"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:06 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3f00}}, 0x1c) 16:27:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)=@random={'osx.', '&\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x3) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) r5 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r5, &(0x7f0000000100), 0x2d) semctl$GETZCNT(r5, 0x4, 0xf, 0x0) semctl$SEM_INFO(r5, 0x2, 0x13, &(0x7f0000000280)=""/243) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000000000000002000000000000070000004000000008000000000000000000000001000000ff030000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001000000000000000100000000000000090000000000000000000000000000000000000000000000080c00000000000000000000000000000004000000000000ffffff7f0000000001000000000000000000000000000000000000000000000081000000000000000000000000000000080000000000000072000000000000000900000000000000000000000000000000000000000000000400000000000000000000000000000001000000010000000300000000000000000400000000000000000000000000000000000000000000012300000000000000000000000000007f00000000000000050000000000000007000000000000000000000000000000000000000000000080100000000000000000000000000000ffffff7f00000000c0c6000000000000f4000000000000000000000000000000000000000000000000010000000000000000000000000000080000000000000000020000000000000000000000000000000000000000000000000000000000000a00"/480]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) 16:27:06 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:06 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4000}}, 0x1c) 16:27:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x48004) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xfffffffffffffecf) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:07 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$inet6(r6, &(0x7f0000001dc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @mcast2, 0x86bd}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)="ab2ce8aad6015e087274348ff185c0a1ea36a3d5a3f2a9c463c76bb4e11a538122fbe37704ab3eb14f40029537840050db295961bb22c42ac4feb73da5599b90cd9791ef3096c97cd7a208e27f81689ff5d96024f8f1f049fa5fd6665ff7710669c8304b8c4d0363724fd45d6afd50566cb6405785dc7fa68bf75ee54e8116559b2ef7a54af9033528512415d8659e885ee639d8b3c2d1dcef620080dbd620e6f1553d", 0xa3}, {&(0x7f0000000340)="85e22b99384739b31909a5abda6ad4e0022befe397f842c369a58ad6bb7891d5dd813b49e465eeab6c25fd1112d791afb18cd01ab5d2f7054a315b62426cdd055c18de405c656f4311d74cfb6cead783875ab538fe019c943cf443feb831c2c9236b3aa9c28a37a26f2796ebc25ed2c08ee8bd1b7fdf988e50cd73dccfe92acf6bcf5c3c05b5cf0726a680aba7a43a6678f629d9f6937e62aee8094be7416d7c7d4dd6af6c80c1f6f79f2fbca56352afe2e4bc819102c8d543a7e614984189979836c59cb4146d77b8e9da5b", 0xcc}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @mcast2, 0x8000}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000140)="0bf6f90fe401f15c0569e4d2a13f9b87850165335dd249fcf58247e99e46f1a0c56d6852a0d27a1d699749143c7c22c8", 0x30}, {&(0x7f0000000180)}, {&(0x7f0000000440)="79c53b6ef8f49f1746b8d006698b60b41361c1beb2242b60f848b0d9166ad5b1a92c1e3a2f00ffbabf2f37d9d24beb967f8b31292825f511d7a74d1e30ce033263bc608557801e5b9ea4f0c1f7f55a7dc1c29641fa23b3", 0x57}, {&(0x7f00000004c0)="d98a8f40c4ce95434d6f1464844a3afbdd514ea2e85381d5154f31214058558e31709416f59f6aa6d5f3c02fe7fd10d8d384026ca82ac03c3f0b0f858b99a3cb17667b65b1b85558f110838889762ddd8ae93c34325bfcfd3050962ec0f8dae4bdd3c174e088fc080acefe529ef812a56b962a82caca35b25712c44599938300c2fa2690d861d99465e7e9653b413574e8a9f95624a7cda8", 0x98}, {&(0x7f0000000580)="3f5ba4b0b9d111f9b5560444c9f1c702476593e9d809b612dcd3b4e2702321bc7a0bf4b275b07650638f96dc6585d79617c2b4bede82888cd93cb1a10c2c9f150520e5ac156d708f9ed1cdc218c47962dc3efeb78382b7f211d02e21475458c81be9c4e675606853cdd2dbb90aa6fb2fa590d80091aab11c3ff2519eaff91f671aafb6a69c3e4a2f54fe0032c2327bbe753317a450fa1c48179e5054a2a5d690546cdb410e910547cb8f14656affc943b2f5b32f8e8e76393bf3997570d8d1a911d956e90aad74130b9f02b73802e61f9e556678858c620d28edd7b2d6fe9e4c610086025d8cad04a70017a0e41fd8d3ba3d38c240a6264dd572bc1d5a2568afbea8e227490d2a3390ef5a6d695de7c958f7447e0b779ab3cf621d0b7d90bf64aa7ee0a51e476abbb24d8755b78f0f1ebf307425be6baa86356580f3e2cf69a938575d3b43dfe7bceaac85ad968e7488b34b12867282d5c230714ceb2cb00e8e9f5961c71610820bff6849f45cb54d4d6732307db77bcaf4b381e63c7ac959205b058821b06ac11bf1f19c7dbdea282067d56ee5de7610961aeb7e8c64eb5ba1b3870bbff26e2aea4b49020db528fc57afb00b8031d089faa14950d6fcabfaecf6b5744c09191eb7fe0a89ddc2e0ed352e5c1352c75cfb16fc5f21d8cd87340760f6aaf5a9f6207903c8587d87cabecd345f115fd5e18f19add1c054e0f02e5e5f54e103d9a7228bfe8ec8150f6ba8f13935d6c0b133495e66eceb589ebaf3158a51d2293cde390f93585f25164b8e1203a3918611b471ed857d823aacc95355b752b375e7b9913a5f973e1458c9b8cfe5798cd224edd93ee092792e80f370b3e457fbcb57837b8a1834b615ddf3b255f333423ad1cc225fdfb44bba177e72c7585ce4a62d2ecc2d834a5e4bc2526070e20fc366a339f79b57a292a8aa5cff2e404d8183534e06af67e8ad9651dd4e37dfb23f8e42a9603bbb7a6a49620df01741739680e19a2356cd7d025b7df8db9f7cceb505f6bb355daa4fa939d6e24707e4e402b090118b5015fc91e30b4846aa3a789bfaefc53e3818541cfb235e5a133a0fa020f0da295aa9c1372b53a933e05313836f9250e05e7e970338eee014baca8f1ee16e254754fd69a4245a84d9916af1c957b59eeb62fd6b0a3524b498ef1289a5ee13beb918ed9d1e6659859d0e93f015f41b0e0667ad1cb5983ac1797678c8a1d6df4e206a2e3bffe38b68bdc9ab28d60642f2364bed364033a59d585dd4d4d860813b88d5ac66090249279c32f8cd81a211d8b40293033d401a2cfb98c8404b07468bf5e147dd5029371ee5b37a52d3f30528113621b4d4da465f6bee904179559ec4b460a4056ec7feaf5b584a71f04efcab8ed7d8b3b97d24d61836a505f0666fb8d6264e46cc6623ff02afdd53cae026a1a7a63b9389f5cf66e9fa3145378d6819b08a821a61d1231fb509c34590d1f079d5caa3f99833d64d962995c85f8d89b007de680774c619dc164217dde1e63d6a3c43b41f4172ac8e8b3a8815e6734ed618ef2a56e99100e382cc4e24e87bd0a2d866eaaef1fe5687e3fc6274f4ef9b3d9904f57532c403e3b2b2ab4f88520928ac86571a939d9d7f7d471a7d5112e57b01caa34c5c567f34af5b01655ae915f3280d522ea0b6cc9d7d5485ab43695ba3121399d118960ad2fce01155126ff51fc9d673c10cd11ca7d2c90b751e2b7681b32a6ad7c9b1cef9b55f21d37b4a21c1249314efc086457177b4b42e181e7cc8d9112136ff7ccf8446fa46696b939f67532ec9e0ef76c3222d43fc5ed61d2f2c510f8fe929dad31e9ec9ac71d37936c9556c04ed63c4df1437f67c5ac5716b14cfa347a555152bb2ed12f84bcd5648be0db12e11414ba961e4fb27198e71f7c9ba514045034cbaf238c6b2230fd5398c0f304446510cf05af6bcdcef44d856f9fc812821d944a78a673710e6e4863f7b9b189bf9ae20a4189d7d41ca30f778507daaf0fb3eee227710e839e4d507b1d1ddff35ad82800a1724c2e5a7546da8ce0c16ab7095f93b69ab11459a9f5f77610bc02f4e6a5258844974a8b22bf1be158af81273a49839d9717df2e27c601dadcca060aa0a6f4e26568933fa34fd86a996d1fa1df209ade2a36f8136d129f631cb6c155f7719a8ca1d0f3a9171b11e95489b0c190a2695a8d6a795d051dc46406272c363c3703a3e0d2e0b26c6723eeb29fa7272b562733a6d81686da8c11dfaeba856012279eb43e89317e8b13d0f1fe55cf8fb78644aab10c14ef1f9b4139e70f6e4c93bd3b2a4ed6a0be9b178efea16914aa618752ca564b9016cc035522cc4a07bc155af923db3fdff6f736d37465a042010c0c7fdba5bb45b23b06e61b49431c9316eeb7dadb198fd1f5823dec9c007551e3f82648ce473e6cd2225108035f7c49c6eeb811f660e8539893b9d1065013562136e350a37f4c43105351a6b9ce112a6114217b7218cfa44f461dc1f7870edbc0089a4fd8257ef8ee449f1afb7e9ff9bd3bea62b37281bc59f2ccd0945653e2df582eca5ab2f644d0166d1e86bbc5d19eb26ce6772e21db3fbc85efa6acd498d149169ef9e2f028770e834637f3de932f8fbd3eaee21b0808b258af60b0ddf567df1fe323e2ffc837c51a4634eae3ce7713b8777ee0d1f250f28e164aeffe00ea40ef1506e99dcdf63e84145561b7eae6af78a639ce114c6de2c4922cf0b46d0d780617f50ac48cdc5bc2c44f88915615b6929e1b582cee995a8381c05d477cd7e29deb67363bc0df591b0edf9054ea72b2fdd5a49c1622aa6791e0d015e199ee01675e85676f46ac0c8b6382901fbe482b786d38879bef5297d8697158cdd519433b9279f5a70d04ca632ba1eae1d6f3d0ba1c8c067fe43fb8c18fec5635995940f28513c7cc2bb24168ed9c975b4a8804d06361954e2903fc07b5be17e3002b1250040e565c4991419752b9aca7754fc63b8c079d1293685f691ca347a5bdc3ba6dd775a705781aa81565662216c567026bc1b4279c16d349be6edfe5ac8470e07e45d1e84dd7102566943d67163a47fde4dff7f79c0a252a2d46b3fc98d3311de32f7e5044ebc88fb2634ca260c6949c2c44a126894f90bd5db11a1f0848dc5a6153aa20474c89ea846a812ea9db3a031cdcb217f4d6e85e57cc77e44ab671c57d542144a2e2360f8a5e2ad7c1f6e4e735329e655e568d8f70f113d4912bcac8072e188e39c6f638a321ac9dfbe4b3c11e16ac09d79c9f32a6ff3c274cd5df2a198853ca63421680b0d4ef58affc881162e8e5fc2b64cf6c127f4dafed7c716b5583d2add85e7c5592b183df3244144c8dc21cce0a9b9fbf138ee9b888778dda0613b17685f0d7f76a549b334152f9ae2d1159f7535f7ae788a9bbba04e62d85ccb684aa6c6c2d4068452aa5c74b46ddc6e57403b38d9396050d31020fe7835e8cdeb2e8100308a860554a829fb862ee5c921199685d9e212f13242a97c8a5a48f502790feb114baf3829c0ded7f6c84c1d0447c22984f07f0cf5a8f3f841c191813b65fd5fb156c72ad3e2fdf3165fa7ba722328110c50a91a75eef34cf6eeb0f2a3d52e23ab25043c089a52ab6e26d561286456cd31179ca737ee40ac3c741ac854ce7daa6f5ba31769f8101cf88dd0fce1469ed1db9a87180eac0e28e0def7ff8504542d7714adfa50f6d6e35a7f9d88e1b6e9d3af654cf141a51a45b874fdf07c7b3cb0f5602eab579cb9f8c4837f6921a216ab5b9a98756bac0dc9aa3ec3340e9162305a0d3c5153117049ceb0df92e5bc2c360682506165d0da5e25d96d1c54bc05d54df2af8ceb9e8874fbdbeea946bd57b885271c5139ce0405372c0c5c23927117305b38685453afffecb11764377b3b7d20ad319d36848925e6fdadaa3c8925332bda5ac3e3660b9777200f9101b4259fb1532b32699c703104f4919ea07771e5990876dee49bfb5c96b9b2fa050c6a282e800016ddf81fe070143b0f042cd81e6bd95e45ba218cf34c6d42e5e9d41beb2f54d76b96ada477384f6212102c75c131d3406ac68bcc7d76533220e5dbeabd056f24bf379a08928fdaf27f10c4525836399766ba21636681ca5568b019f506a320cf226dcc6917ea661c05a5c7d7381467a7e66bf5acd64ac06d5193d148ae271b35302c52e8386084091cbdc34214fc5fae689e59f41ca2edb58fe93466bed13e2b9d27732601519b3d29c1af1d6538fccd66056ee433a019fe21fb98c768c5a8e5d424f5a211d8497d7fafde42fe512631844793f93d92c26c04ea78c1ff6c8c2a2dd4036583cd60eefbbf83b5562938597fda9397f660eabdb3b737fc4bc7acf9a9208e1886b7dfafb57415f77c73deb82ad7bcd015a9bd324056c6555c0feae653eead1aceb5deef7d4be634cc42f67eaa4d93a0bad6e00ad436393e8112daeeb558bad8c36b2646d5f613fe96e20aac2c598a4577b8643b1ae367918470d3e0cf55fbcd9fda9c92aa362dc364614737381b7ee861a4bb62fe4b4399b2d29c80b5937a1e8cb441bff356e8febfc2d4158526033542b7fd0dead2a796f17a4850ef0db99ead90a0de310b26e45c1e00ea8239e16beb85d1055eccd75a78ffd071381312378e72634d0db35dc9227502fa39e5943f71c2b7dc633bdc154880a188965522f11e1600dfc0c0ef4e0ff11c1815cc5c77605fbb0935b9173b3a7d4689934ddf98ce236d46e045284f2ca600154efdcf8e0537cf44e731af921829a57befaf60e1b61256686ec97cfa813769adcab9f94492efc56ff1327086e6206d29e847bec5a5ae687eab4ba71ed88989b9d25154176f7d1e214be2613c2c17e3218925796ab68cf4734047bc86fc5ece189bf1e2ee1a0d1c827c7f5219f3b838b2cde6bff621b007ce732ac105ca85130646415ff795dfe662a5ce41a5042fe7934d202f95c41caa7d1eaf2500cd2b11ae0a10711f2078e6088e4a002c887cee22584ea3f85651a1d6aa26a30f6fdfa6b6dc2ebfe8824fdfb5e1dffc0bf03dab33278ccecc9ff5cbd49a267ef011a82f0927f04a3e940ccb90c8f427ae1f4d1db94088f25dc9fc9ce5cae4d67c73364aac8e01311238e8228f42790d9014d58cd539449fe1664eb54ef3c573ade33f5a29c383a89e73797f5b53e78a7b670e629781cd1f7d11f2ddc02f74e7c6af1e79ec047bdeb5268f6b1b36e248f3e6848332da616adacf4f2cd39660d9ddaf0bd00df845f68e1374be34ca079d1995e7442207480bb0a4f9fc9acd62b41f5bea37e30061877acc01bbdc04ac684218a573c95f011a2362bc25bc58b8cdd8880fdb14edd766a74e2958c4618540a970a00be10406de10fabd0b913fbc0e658dd0b3273dd637059c11b39f22eebf55e20b605c4a574d4b9dc30fd30bc9debbcec55331592ac210849d02b6a741bd6f6a59f81e17e08ef7cf34eafd9beed984cd20389ff322f4dde39a01fbb1a23f4f7b44a883bfa138c0849b353042a0432f0617cfc5bace8310a31e2b188acfdbbc2e85c7f17ee674c7b474593f1c43359a6d83267764de457fddcdfc127946b02244f6a80d3ae314add993d64c605e317599e699d22fa9ef6f119e93140446f3f1065487c0bd5927ada16adc2cfd47011e51ff950fdc008c9d9f6969edcd3ee89a3fc813202abf262d28357f6628accb40cca15e461ab3188aa081dd719eb9f4faef6b30653966421d33429d980c1e0b3d073fb9a7d2e6f4f91e163f871191d5011dc683810efdcc58b5a4df26cae3f48adbf612a79da94ee22a8426b4a14d6fe2", 0x1000}], 0x5, &(0x7f0000001600)=[@tclass={{0x14, 0x29, 0x43, 0xfffff001}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x81, 0x0, [@mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x58}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001680)="160f3eab346db24af752899b22066ff2c53e08c0ec645d8fefe1c82408d38005223443f155e88a3d6700563c0f7b79b2c6f750c224598fa2370e6cf54c95fb2218c56def464a25bbd316ce8b56bdc7ed", 0x50}, {&(0x7f0000001700)="f3d731617e4a4366f79b2720c52f1488c2682cb39616ddfb7e9d907d2a9862b50598b9b9b5179c09744dbc9450b548709fb2c550d338a7858de8d9cd5573d27897a405c07928ab30f55691f17667a0a937a1254c61c0efde9799f21ab10deac5b031eb55aa83e3957799597180e3d332250c304fbf71a8b8", 0x78}, {&(0x7f0000001780)="50407f6c6f25f7f1c6ca4678b7310eb085f47ba6a676b12ba65d0d090c99fa6c7b477c355600a832b4e38067259cb75be223929ae1aa94ba8f7e45dcffca277e1e375ce0edfa7af9c0e3a421149920c009259a06fb772b465d7ca6d070c0f43dbd7da0110dc7bf75202a3089f5341faa7c746469369f3e68021262d8472c7ae8cb2c65b8099cf65d1aeb76a19adf2f74e9df7856b535225cf852fc30b82d", 0x9e}, {&(0x7f0000001840)="5fe172492230ec532bfbf5227a5b6a8c90a4df13d7498e61c6f0fab0b64de093e1b11479e538985e2203e297f49f866ce159b9c56a9df88c803781d2de96c06e1e74afa1c789a0ba5b3dc17b7c37035c087e4cd25ff0fafe76d4420ac3a0cfd9d7a88f9e73f2ad8e96da24c1426d327bc1df3961691463212b04acbad564504d", 0x80}, {&(0x7f00000018c0)="b2e37ef0e54d30f4fe06b711ab03590e0b581e6fb536f17e347d525b3b09ed768f6c868acc361bef2be1f4aba4d3d9a950d0e5305262342ee29bc64fda2a8a66478612a84f60aa2fd01f30aa7a36c53c2c6fc87bb8b018c8a43f63a31b2896b91be5ce606487c5e163023cde39e23ba4643d09a8a7113dff3cbce69e67ae1d8016a29980ebe834c555c1012b14a39425649e0aba29bb2b5131", 0x99}, {&(0x7f0000001980)="1d5387f4a23831d83198d45cf0fd4c4902aba61f04bf305e543139d26eedb26674f3bcd2ad9c9bfe77d7c49d786d05b7869d32fc710af43c37d1383840190cb52df46b33516b19a9af1612ddb7577f35208f1f182f50384281c73e5fb2a91b3a87ef9357d0056fd5dc4ad634a2116656c7b5bea9d15308cb52a63c0f8b98f8d2c2b9ed1ebf3c437419391987f5cdd7c3db1fdc209b9b9cd64a3dded4bcdc8045ec244048ce47c2acfb98daec5ff04c4c4356d030ddf8b1b8065c6ab7c9cb8bacf2f76c1c3cd5a17c5f39183d645c9a46c7aec37864", 0xd5}], 0x6, &(0x7f0000001b00)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x61, 0x1f, [], [@jumbo={0xc2, 0x4, 0x547}, @generic={0xab, 0xec, "23142be45a44208651dc724981bcbe94e0a133eb93711b896ae518756864b0bbfa1d4a49cbd3d3b19d629b45ec497107d0f8945173087ccb247d861667107c1fa2f6486732c65bb39b849945d2d47f0b9afa7a6fa010c29404371316d1a399fe68e9976584aad553522f881be1a958c16dfefc5513cca81238d1d5743b6560715af3c3279067b88bc39b54db4105c07eaf3742eaed7c234a969db09a84ae7b948e492b6d24629f16290ffc06cb5da1b2e3abe4d7ff4595c1c3409a6b43f082145ce99705365069bd81dc37af4b0578745b4456b251b74cbbb6b7d64fb52452e4ea3b6c94fa988fa6a036252e"}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x38, 0x10, 0x2, 0x20, 0x0, [@private2, @remote, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @local, @rand_addr=' \x01\x00', @private2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff9}}, @hopopts={{0xa0, 0x29, 0x36, {0x0, 0x10, [], [@jumbo={0xc2, 0x4, 0x36bd}, @jumbo={0xc2, 0x4, 0x3f}, @generic={0x1, 0x76, "b73c732c1344fd01c0e14e3abebdf0a7582ec63ec99e5618c306b8a37bd7b457f55d6c75d31ab0441618ef5772a737d76a65972b945fc9a8d29878c9494774562b9759e759fccb337acaccbd3fb99cdeccccd1caf2ab841548326397eb9a232da721b8872eae34e7a62819075029edc1d51d273c3d42"}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, [], [@jumbo={0xc2, 0x4, 0x8000}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0x800}]}}}], 0x290}}], 0x3, 0x10) sendfile(r0, r4, 0x0, 0x200fff) 16:27:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4102}}, 0x1c) 16:27:07 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5400}}, 0x1c) 16:27:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6e37ac0256c8014c9b05a68675012b76b99cc77a67713bdcce0dbfbac9c45f493c29aa291d0c364cf6cc3d8a1e78616fcfc000bbd5faada82b6733361ac0120abc", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r4, 0x54, 0x45}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'sha3-224-ce\x00'}}, &(0x7f00000001c0)="607cd9d9c8d0dac818c4d771b951845e1438c5be0e717e2c3655731e4cb4f830d8daeeaf8f404a164a60b3271e6a70b7449114a9412e86e958a918c6cf19ef24ae8a6cf1997aaec0736d65a4ccabe38a5a5f965f", &(0x7f0000000240)=""/69) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:07 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x7, 0x0, [@private0, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:07 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5800}}, 0x1c) 16:27:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xff04c96797aa8b74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) uselib(&(0x7f0000000000)='./bus\x00') sendfile(r0, r2, 0x0, 0x200fff) 16:27:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xa881, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000600)={{0x0, 0x0, 0x80}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r8, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400000c}, 0x20008000) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f00000000c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000000c0)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 16:27:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 666.291475][T31633] Unknown ioctl -1065308482 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xb804}}, 0x1c) 16:27:07 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x4000008, 0xffffffb9) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f00000000c0)={'veth0_to_hsr\x00', @ifru_data=&(0x7f0000000080)="2008321dbdb26debc550061ed55079e9d3404dd6855f252ad844a69e4d18d742"}) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) [ 666.433814][T31647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:27:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000380)='bond0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000000)={0x3f, "696cb97bc33233aa4cdcaadb7345e123e7494e5ad2a96a95854fffc94844d790", 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0xb2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="5ec4523a41a81da01be1c521a60a54be17e7a40ec1a8740b32cf82b531541942c084def37027baebda9a0df1d7cf5c5e21af0bc730a3ef4f17ddee099c8fbda4af44773015098f9b0171003ec42e1d4e662fb4ae62ad0a52c11534f1ed80c8d59fd2e6d9086912097bd8f4a377848d9a804f824e30f42931a5c416dff044e253ef0abb1defffd7c21fbdbfd613bade0afc918d9093dafe9f9a29c7e66609799d11a37a15702e0693a9e1ddc4bfe014e9c8c475037b3a9d67d1050ada86af5dd92b0d5f89b8249ce3fc609d", 0xcb, 0x9}], 0x41, &(0x7f0000000540)={[{@gqnoenforce='gqnoenforce'}, {@nobarrier='nobarrier'}, {@gquota='gquota'}], [{@fsmagic={'fsmagic', 0x3d, 0x442cbc3a}}, {@subj_role={'subj_role'}}, {@obj_user={'obj_user', 0x3d, 'batadv\x00'}}, {@seclabel='seclabel'}]}) [ 666.499834][T31651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:27:07 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xc4ff}}, 0x1c) 16:27:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000380)=0xb05, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:08 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe02e}}, 0x1c) [ 666.665012][T31663] xfs: Unknown parameter 'nobarrier' 16:27:08 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe803}}, 0x1c) 16:27:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffe}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 666.716536][T31666] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 666.741168][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 666.741175][ T29] audit: type=1800 audit(1594052828.128:703): pid=31661 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16252 res=0 16:27:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x104}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 667.056842][ T29] audit: type=1800 audit(1594052828.438:704): pid=31677 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16366 res=0 [ 667.186567][ T29] audit: type=1800 audit(1594052828.568:705): pid=31649 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16367 res=0 16:27:08 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x80000000) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x1e}, 0x10) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fe) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000000)) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:27:08 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d2e6e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c479502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b264c56363043532549ea67d097e5a476526372afa41da14e74d8a11194506dc090661c23a1c2226bceb0dfc013f9884d2d54de"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x200fff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x5c, 0x1, 0x8, 0x9, 0x2}) 16:27:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="40020000", @ANYRES16=r4, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0xc044000}, 0x44040800) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:08 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf401}}, 0x1c) 16:27:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x4, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffc}, 0x0, 0xc, 0xffffffffffffffff, 0x37f6fd7c12dc6561) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) clock_gettime(0x7, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, r2+10000000}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x6, 0x0, 0x6}) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) 16:27:08 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfc00}}, 0x1c) [ 667.368073][T31698] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 667.382318][ T29] audit: type=1800 audit(1594052828.768:706): pid=31699 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16380 res=0 16:27:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x2eef, @dev={0xfe, 0x80, [], 0x31}}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:27:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, r3, 0x313, 0x70bd2b, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffd43}]}]}, 0x1c}}, 0x4040008) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:08 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfe80}}, 0x1c) [ 667.557047][ T29] audit: type=1800 audit(1594052828.938:707): pid=31707 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16383 res=0 16:27:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0xa8) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x1}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x41c2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x800, 0x9}, 0x0, 0x0, 0x0, 0x3, 0xb533}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) sendfile(r0, r2, 0x0, 0x200fff) 16:27:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 667.603413][T31714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:27:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x181}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x3c}}, 0x8000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200001b6", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff0f}}, 0x1c) [ 667.876732][ T29] audit: type=1800 audit(1594052829.268:708): pid=31726 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16252 res=0 16:27:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x26c, 0x2}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="0500330000000000391423bbaf486c74b4222866c2a6a649dbd16576285b6d9476db8a119639311a4b8d9febc88363f14f246b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d2f601e0e212c36dbcb314660e88088a269799180000000000000065ff95b6a69144bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b012685a1363043532549ea67d063000000000000000000"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) dup(r4) 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffc4}}, 0x1c) [ 667.983011][ T29] audit: type=1800 audit(1594052829.268:709): pid=31733 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16378 res=0 [ 668.036236][ T29] audit: type=1800 audit(1594052829.349:710): pid=31740 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16365 res=0 16:27:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0xd79) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @private0}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000040)=0xffffffffffffff13) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="d9332a5c"], &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r5, 0x81, 0x8, 0x5, 0x1, 0x4}, &(0x7f0000000080)=0x14) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x40000}}, 0x1c) 16:27:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x208080, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="9000000024692e76c249eeb42b390a3655aa1e0e136e3826348b138b031d20e2b9d8f9ffd1eeb12b1d682a9df046a5e885014d3daf92ac711153305cb725b96c0b8891b16fc27f250a7de60c42a6491a99a8350fa4621230fe", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25010000000c000400ff070000000000000c000500290100000000000008000100000000002c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="aba5567cc80c6835d07ca6f25d31f5ff997c532af805d05a4aab13eeb0e3dd592a1f4135b2a4e6875f6533e4cc14a39e0dcfb85ee9cd0bd113009384d5cc80b1dc03f8188b12c387561ac71883d7e40ad6b741d8364589d28d1b496b483809df9649baab6e4de219239e", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0c00060001000000000000000c00040005000000000000000c00060000000000000000000c0005000001000000000000"], 0x90}}, 0x40000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x404}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0xb) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000814}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250f00000040000380050008001f000000060007004e210000060007004e210000060004000000000008000300020000001400020076657468315f746f5f7465616d000000140002800800060000000100080005000300000008000500f42b000008000600810000000800060007000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r0, r4, 0x0, 0x200fff) [ 668.204663][ T29] audit: type=1800 audit(1594052829.589:711): pid=31751 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16367 res=0 16:27:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35b23663da4b1e1d2ae0c645573a6bc64e82745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x50000}}, 0x1c) 16:27:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 668.372435][ T29] audit: type=1800 audit(1594052829.759:712): pid=31761 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16376 res=0 16:27:09 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf0ff7f}}, 0x1c) 16:27:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x400) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) pread64(r2, &(0x7f0000000100)=""/177, 0xb1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x8850) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) sendfile(r5, r9, 0x0, 0x200fff) 16:27:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:10 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x1000000}}, 0x1c) 16:27:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40044) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1303000000000000000007000000200002800500020000000000d0a2a84a37419d3d153fe6f207c80300148be29685a8069abe21a7ca70edc95be086b983c5c1576800b3dc99270a697d23c7dad70b207d53ff74d49799eaac"], 0x20}}, 0x0) r4 = msgget(0x3, 0x440) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000000c0)=""/240) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x2000000}}, 0x1c) 16:27:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 668.844355][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:27:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c000280050002000000000044cdfbf2cf48a63f4cd604f825b50bf4b6ac3bf3034afb0881f0bc9e09119fd3a50844fc81eb7b9263d9a261df16480aa1f8fa03f01d04cc524d498492e2d7099def091dee9ea4199111"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3000000}}, 0x1c) [ 668.915216][T31802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:27:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4040) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000280)={0x0, 0x10001, 0x10001, &(0x7f0000000200)=0x4}) [ 669.023255][T31809] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:10 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c) 16:27:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="130300000000000000000a672f3c02103eaa3aad1577977cd21f070000000c0002800500020000000000"], 0x20}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80600, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0x3, "ed90a9ced3a768237fcbe7efa2ec996fa2afe9ec055c3726be1b53aa3be5312e", 0x4, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c) 16:27:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x7, 0x1, {{0x4, '}],!'}, 0x7}}, 0x11) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/bnep\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x806}, 0x804) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r7, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 669.382375][T31829] ptrace attach of "/root/syz-executor.5"[7357] was attempted by "/root/syz-executor.5"[31829] [ 669.434759][T31832] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0xfff, 0x9, [0x9, 0x6, 0x80, 0x81, 0x366], 0x6cb}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x6000000}}, 0x1c) 16:27:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649d91366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b849febc88363f14f066b4ee8fd6cf2000000a2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b89e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064cfe00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000080)={0x6, 0x4}) sendfile(r0, r2, 0x0, 0x200fff) 16:27:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc) fadvise64(r3, 0x0, 0x8, 0x4) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:27:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000180)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') getdents(r2, &(0x7f00000002c0)=""/57, 0x39) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'bond_slave_1\x00', {0x2a, 0xffffffffffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1ae29a1922673623, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbff77fe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x80) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x54) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x7000000}}, 0x1c) 16:27:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x880) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="7fab262a520bbc705507ba9e21fff2c213d06e52fcba95f601b2f1aad1ad91d7fcdadd0524fd770611750a395f3271feee0929d4442df8b415c815eb3e0e1158cb97ab01ba3ed84fede012123832f4a4151df62c409b8005ae88417139fa2a1661f5eebbb0f9e5706fce30ed3ddd93dfd11a5450a3163df37caa4679a31e229b174faa79095962d345232dea51feabb0bef191b0679875166c29387fc44fe0a35e039e5181ec473d054c112d596bdb3f7ae28e3a1d4bdf55c7132a797a26ea79402fa080f14c6ba37146d9aaee47fdf24ecca5f3282e85665e3b96", 0xdb}], 0x1, &(0x7f0000000100)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x5e, 0x3, [], [@pad1, @pad1, @hao={0xc9, 0x10, @empty}]}}}], 0x30}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000200000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0xffffffffffffffff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x8000000}}, 0x1c) 16:27:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000080)=""/33, 0x21) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7ff, 0x3, 0x3, 0x7fffffff, 0x1, "328e4bd7133132ec031d22d54c3350e19888de"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents(r6, &(0x7f0000001600)=""/47, 0x2f) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 16:27:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x8000) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}}, 0x8) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x9000000}}, 0x1c) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xa000000}}, 0x1c) 16:27:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000006cfec750ad000cb1824a3494ec4908d97da5152ee7f8f003dbfad7f33e50c5d06b107ea7eb483cb6d0abe9a6af0cda9c2dbc7e9f49603a2af506690f0fe052d65b50281f73f3b166844779ffb71529480c873002acc080da31b9fe4daf1ae8e7859ec996fc3bcae168376501b20eae76fa3b36e2b2d948d6a62b4a32c3e0a72c", @ANYRES16=r7, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @empty}}) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) 16:27:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3f, 0xeb}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) fsetxattr$security_evm(r3, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x13, "e9fe247bc550f3aa2b6745e55430cbb2"}, 0x12, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf000000}}, 0x1c) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x18020000}}, 0x1c) 16:27:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000280)={0x5, 0xfffffffd, 0x9, 0xfffffffa, 0x10, 0x5}) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a1400042abd00"/24], 0x18}}, 0x40) 16:27:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000bbb7e41c1c1936b339fe60c579", @ANYRES16=r3, @ANYBLOB="13030000000020000000070000000c0002800500020016000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:12 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x101) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @remote, 0x2000000}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000200)='./bus\x00', 0x9, 0x3, &(0x7f0000000540)=[{&(0x7f0000000240)="b65f83e77e0d2667", 0x8, 0xf7c}, {&(0x7f0000000280)="27c433bc8145b3ee93fb3ded3e8864aaf7d0e7586789fbd24a5e6ef0334ca7d576ae14c7b7f466d6585135284ba6a2c23e5e0b6ccfb034b6f27d0797b850237a5e6e857736129eea07a2ef10a161a39fb500bb5cbb4ad025e486b9905efbad6487a3c6f36e962666decb8840a617bd95b833ef83f3c7aec1641e24d51ba7c9c02101fdbcb164e623", 0x88, 0xb58}, {&(0x7f0000000340), 0x0, 0x6}], 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6c733d69736f383835392d332c756d61736b3d30303030303030303030303030303030303030303031302c6465636f6d706f73652c747970653d92e5d4a92c6e6c733d6b6f69382d72752c6e6f626172726965722c7569643e", @ANYRESDEC=0x0, @ANYBLOB="20000000000000009246091ea37d6861743d626174616476002c646566ce96a99f653e9a1c21c86166665f752c66756e633d504154485f434845434b7e608bdd2c736d61636b66737472616e736d7574653d2c27"]) sendfile(r0, r2, 0x0, 0x200fff) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x20000000}}, 0x1c) 16:27:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000280)=@routing={0xc, 0x10, 0x0, 0xd3, 0x0, [@local, @mcast1, @private1, @dev={0xfe, 0x80, [], 0x25}, @private1, @empty, @mcast1, @local]}, 0x88) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) write(0xffffffffffffffff, &(0x7f0000000140)="ae9c18eb42821445163cf3361e66aa4ce485", 0x12) getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents(r5, &(0x7f0000001600)=""/62, 0x3e) ioctl$TIOCNOTTY(r5, 0x5422) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000000)={0x5, &(0x7f0000000340)=""/183, &(0x7f0000000080)=[{0x9, 0x8b, 0x0, &(0x7f0000000400)=""/139}, {0x1, 0xa1, 0xf43, &(0x7f00000004c0)=""/161}, {0x80000001, 0xf2, 0x81, &(0x7f0000000580)=""/242}, {0x7fffffff, 0x90, 0xfff, &(0x7f0000000680)=""/144}, {0x768, 0x1000, 0x8, &(0x7f0000002040)=""/4096}]}) sendfile(r0, r4, 0x0, 0x200fff) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3f000000}}, 0x1c) 16:27:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2883, 0x20241) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r2, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}]}, 0x20}}, 0x240040c4) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 671.071351][T31916] hfsplus: unable to change nls mapping [ 671.085760][T31916] hfsplus: unable to parse mount options 16:27:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @private0, 0x3}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) write$smackfs_cipsonum(r3, &(0x7f0000000000)=0x62, 0x14) accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xfffff000, 0x1000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x2000}) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:27:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000306010200fff8002e00000006fdff04050001000700000005000100070000b80500010064987d040000000000000073797a32000000000900020073797a3200"], 0x44}, 0x1, 0x0, 0x0, 0x28040804}, 0x44000) sendfile(r0, r2, 0x0, 0x200fff) 16:27:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00002000000000f1ffff11cc4d00000000000068"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000040)) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x5c, r3, 0x313, 0x70bd27, 0x0, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000021}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3f5c13e6}}, 0x1c) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x40000000}}, 0x1c) [ 671.281624][T31930] hfsplus: unable to change nls mapping [ 671.316567][T31930] hfsplus: unable to parse mount options 16:27:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getuid() sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000400)={0x98, ""/152}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x24440, 0x0) getdents(r5, &(0x7f0000000180)=""/53, 0x35) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r7, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000200)=0x1a, 0x4) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x464, 0x4, 0x70bd26, 0x25dfdbfe, "7b7daf35166e4d43e0637f1d54e2298ea713e257f61c53", ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x41020000}}, 0x1c) 16:27:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000041c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x4d5, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0f0000f8ffffffffffff0e0000000800435675538dab0fb0096fbe2f0300", @ANYRES32=r2, @ANYBLOB="0500330000000000"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) r7 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r10, 0x2008002) sendfile(r0, r10, 0x0, 0x200fff) 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x439577e3}}, 0x1c) 16:27:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x40, 0x200) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000000c0)="a042b3e228472f140a3ce6bbdb7e72d30fd4b4fb79f7fe5ef32a0323f7ffb4375a4637f1e1ebcb362ba7714fce0b731a7466e8b1efd577bd1afb889bd08b3a8cf99a7db0a491d74ddd327b36f40cd425a7cdd3b05e5553deddc34dee09b26aef08d67264dc70", {0x1e8f, 0x8, 0x49433553, 0x8, 0x101, 0x9, 0x5, 0x800}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 671.583973][T31974] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0xce20, 0x6c1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 671.689190][T31990] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x54000000}}, 0x1c) 16:27:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1816badf", @ANYRES16=r3, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="051033dc969f6700"], 0x24}}, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r6, &(0x7f0000000040)=""/46, 0x2e) getdents(r6, &(0x7f0000001600)=""/62, 0x3e) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x8, 0x7, 0x8d51, 0x80800, r4}) fchmod(r7, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x58000000}}, 0x1c) [ 671.904162][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 671.904170][ T29] audit: type=1800 audit(1594052833.291:728): pid=31998 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16383 res=0 [ 671.993574][ T29] audit: type=1800 audit(1594052833.381:729): pid=32004 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16268 res=0 16:27:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000140)) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x14, r7, 0xf01}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="000028bd7000ffdbdf250910000014000280080005000700000006000b0002000000080004000600000008000600000000006400038014000200766c616e30000000000000000000000008a07b6692e83582db59d3000180020000000500080004000000060007004e210000050008007f0000000500080000000000080003000300000008000500ac1e0101140002007465616d300000000000008000000000080006000500"], 0xac}, 0x1, 0x0, 0x0, 0xc080}, 0x20008000) sendfile(r0, r5, 0x0, 0x200fff) 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x7ffff000}}, 0x1c) 16:27:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r2, &(0x7f00000000c0)) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0xffffffff, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x8dffffff}}, 0x1c) [ 672.151527][ T29] audit: type=1800 audit(1594052833.541:730): pid=32013 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16372 res=0 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x91ffffff}}, 0x1c) [ 672.302446][ T29] audit: type=1800 audit(1594052833.691:731): pid=32019 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16383 res=0 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xb8040000}}, 0x1c) 16:27:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x80001) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x24880, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xc41) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x400, @local}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000000c0)={0x3}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='comm\x00') sendto$inet6(r6, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @rand_addr=' \x01\x00'}, 0x1e) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:13 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xc4ff0000}}, 0x1c) 16:27:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x2d1309900ce1a6c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x5}) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 672.661479][ T29] audit: type=1800 audit(1594052834.051:732): pid=32041 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16294 res=0 16:27:14 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:14 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xc4ffffff}}, 0x1c) 16:27:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x9, "11217260d796347ddafdfaefe8eb9bb34e50d0f78fbc0f9a6baaa8c3c206ccd4", 0x401, 0x400, 0x7, 0x1000, 0x10001, 0x10001, 0x5, 0x40, [0x6f84, 0x1000, 0x6aa9, 0x2]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000)) close(r0) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffffbf7f, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x2b}, 0x81}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:14 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe02e0000}}, 0x1c) [ 672.853616][T32057] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 672.920668][ T29] audit: type=1800 audit(1594052834.311:733): pid=32059 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16372 res=0 [ 673.671329][T32073] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:16 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe0ffffff}}, 0x1c) 16:27:16 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/58, 0x3a) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 16:27:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000240)='L', 0x1}]) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000180)={0x2, "19ffda7df8fca28d2ac334996f18ba3369f8908dac8578c82cd85a5e0eba07ce", 0x3}) clock_gettime(0x0, &(0x7f0000000000)) io_pgetevents(r3, 0x120, 0x0, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000140)={&(0x7f00000000c0)={[0x8]}, 0x8}) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5e030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x2000c8c5) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x40040) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20001404c8d53377ae37c2bc655ca15973d1dd7592a7462c75be8d1ea8a0ee6e697d61f18b1ffa9a3484559bba8a004f13c67ed9fdc91247794dfb75bc6d5a3262e79937c8693c1b5a9ae33ad5c66105fb9a404525e2b75e3069f656ead59d9f6777e712d0de16ce4f7e325c1e0842d35f00ac4cb1336ef7b138c9236acc5329348e6b8554e8951e983720b82e1b9c40cea157f6dcf730f54e6ff1498f03bedf2a40ddf85a207854d5812f72cea9a14b6b2f3528af0e0f24ae3f64339f3310919992d7e68895e4b32152335c01cc838441", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c00028005000200000000003ee737b4276ad8ed7d84e7937922a37de83135039406377ce987c63f9ae887ed615dab3c3ea29be25a0350a57e18bc9640ca7e56c13b5c18e95742c1648027322d64078e84d8cf8c35223238b022bc3f558e3ca5593753ec450ec45664dbfe6ed55b443c03a5e1713cb504f698e30f3e95e8efb4dfb3c2f4fb04f0d44dbbc4bb798af485ffff6042534684542facda866b08ebf9f07ea031fea80a85a68d719c6d32f297318df8ba805f5b88eae60ae49f0409280799be24d4397488"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:16 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe3779543}}, 0x1c) 16:27:16 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') setsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000080)=0x8, 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745035e7f76d26b84e0e212c356bcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf595af56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="a87983ef80be7c3ab13052bba8ee0f393e7f7a73abe026ca3b2be41086d7b30e6e0f72bb58d01bc6b307cdeff478a45e42698d0e9fe5ddff7a9b4d19b897c16b7f60338b44424e66c2ca81b1c1a4fb9d9bbb0cf3a6d449cd80c07f3a4dbc206d210ec412cb79eea7d723f8ea6e2ccb8bbc1ed01a9330a27c40eb6ea1d8e4cc1a2165241be462917147e125cd9ae2df6d4c2353ac6cc1f603a908f203511ab6150879e0b4cb2af351b2d7aed2fced3f32fa646f1d805c", 0xb6}, {&(0x7f0000000340)="63c3cfda1adb20759d5d3a95666c4e411d18396429ede4fea9db9671fbadc6d0e3c2f82728ee6c90ab4d89028e437395e975a5832e2c4d1fee842f1b44fa18a6ae92147f027eb4cbffe76a40901f3d3d2f3718eb0b79575466fb7adaadd37b01bc43019173baab1b269bc0212092ca3e3122d66c8bc33a6dba95168ac859595b00386916700d529cc99bb7a8e2fe25840c008de8beed36c7c0bd48884ad537bf3830253b745ad2fde9938d96ad5fcf2001e8b108e53431e2", 0xb8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="fb191247ce1c42b1aec217b5e0e9a27e0c17744cf86daaf66fe04222ed41468243078bc62f4e3514e82978d87b7f23385b83f681be690c765d7a7ff322744581d2f7696f730137aa04ddb287d1178a07b77773d6b8076085690406eb0d5cf577c090646a4758113a37211260566335e9a292b785b9b62f40bba7ca7390f3a23af7bb2a580db4663d076307e7f26ea025f81447bda1287f831ea28b5270bcd964c57d51", 0xa3}, {&(0x7f0000000140)="d4c02c5b8f0890866e018a5f2e827edcae8de04b1ce7b48f6e9b621ea1f48539315be63d3206a5c038bf7b6bd000400049095872f6eb91e1e3857b080c092873e4f9da9f3dce3a200ce204bf8f02d18d2e6b44c3cc99aab958674ee41b6e0d821c8baacbd433adf48005cf7214be09b473ad3a596ef922", 0x77}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f00000014c0)="579442c8b4d09b201552945ed2f884d8f5d04b10ff78a36b41ee3f063127352e2d18f594155e1988f82f79cc3a7b6fcda71b3eb06560eead5079098cdf3a2e6967663b1a5dd174029d78bbbce3539c35f50acc4403890abc1841128c2b703c1d91a4a28d57e0b753c730c8014c", 0x6d}, {&(0x7f00000000c0)="587cea939db4ad78c32011b9ebbaf1e920eeaa4440c2122eecab2f851360620d4dfb87bd5a878d9ed8abfe3d66828109d6966d17d8fb8af903b840", 0x3b}, {&(0x7f0000001540)="b2d418ae653b6dd446d0f7e8ff62be95a36c6fe313ff2a170d1afb3021fc336231e7f16b44bf28cb871a0ebef861ca7a292a4b72572a12834c414515c4d75f498f455d4a6b71c2311a90c8319c5e04eb3c1d40f3337395d171c8173709a00ea306dfb5fe88bb8b3a3f90ccdce5863e84b2959e3a3ca4c73cb68960bd8759ac9484f42f55e4ce4a404c5bc0ac65e212455068c751848cd121463d6f9aae44", 0x9e}], 0x9}}], 0x1, 0x20000040) ftruncate(r4, 0x2008002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c5b086cd5d27e6eb2525cd78d8b8d7d7b4b890b04973bbc92c275fb485b771437a311701990478897d68accbbb", 0x2d, 0x4000000, &(0x7f0000000080)={0xa, 0x4e22, 0x7ff, @mcast2, 0xffff}, 0x1c) sendfile(r0, r4, 0x0, 0x200fff) 16:27:16 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe6135c3f}}, 0x1c) [ 675.491522][ T29] audit: type=1800 audit(1594052836.882:734): pid=32104 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16311 res=0 16:27:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000fa9d25e21c93fe40d72b151d004b1e545c034a72e12af221591124fa0f1b5d5c88563fc3ddad8a82f9f9299e8b225d9a0f891a3001bf7f9419f5f94c9b2290b31352d34581500df424f70977bddd62ffd989b65ca1dec7fcc9a03e819fed30551e63b169795594e063cb3be40ec93eb20f0dc88b475e0dc755367e90f46314908f8670f0a36d064a8677ad593f110cbaadebabe9a2"], &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r3, 0x5eb, 0x20}, &(0x7f0000000180)=0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x80}, 0x58, [0x6, 0x6, 0x1, 0x4, 0x0, 0x3, 0x5]}, 0x5c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x50, r5, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x9c22}}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x60}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48845) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) sendfile(r0, r9, 0x0, 0x200fff) ioctl$sock_proto_private(r6, 0x89e1, &(0x7f0000000280)="d925fc3890b8e21137b16927ceb78953c059afb87ab3be9dde82016c2b06e0aea272d4ff115a84268f91e27a8db24d2def9e030c450f8e5289a5506188f5ce5b4d0ff40c4000218c9f8b4c398aa2b2abad7ba3ee882dd0b5d1da760b9d0825e7ddf8f8164aedd130994276348281ef305a7c6bc491d85b21996e718aa487827d2c6af00ba63c28957fcf1a17d089511700896e8f6048dc7ccb380b1cd3555fbce8dadaddea6022114f48be71efa08d9ac30c6dc7257bfab9a1b1881f7031f8f0301105606aff7a66cb6e3690818ac99e957e52c7530965366cd413d4fdad68c0cec208f975d9ed7b8099e81aa95b670932e67d183ccf7395c8cb1b4668e5c6f13f9f18e0d6f9cf042a979ec15cb1a79f72182c2e5fc5e710292c467e86e74082833a26e933ea8166b81d3367cc19b43127abfeb33a40c4eb8ccbac404c01b4eba5ab5ae65fe144845c55e954ea93b1e69d609b1f7c7c1db3304118a31942f57adc767df0ec97682832bb6e13bf4a81e807efb2e4d13cd6f11e4386b6f795b0dbdc8a027e24f4e5a81d212bcc1131265a292aa7578d2845ff2bede7f3135b8355cf40a5222d121cf52b307379f11a2556a4e83d98738ecd92f46347e989fdba89cbe509a02a5762ec24e570b1eaf84b07ae2973cfda932ac5d923984813cecc0fb35955b210e34ec380d746d506173e31f16a210de5b1f62e6eb40c7eeb1b247f403b878cbb42af28945186a780a77693cd24265665898f6d3e673b66fe123b075dfa72d8c2e4b916660efb90bed342012fe91c382e835248b73da90488135623cbd5f007ba79734c3f1e63f7e627eebfa4b389cfdd6e3c90121e38f79048178a0c9a982bd85f8e54659a69e65aa396b6d48b2ef7a3ab3547ab3327991aa0f9235bdbefc33e5662668301be146845c2a079df96478eb2466e4e6e82b4c1df8d74691d37e857afb5e48b77267295c50731d0722f2d4ffdc8eecfa13c11811602034f9cfe888644be66d46a98c96b782d140536a99a798579fc5a967015386d7678729f34190c0228a994f43a69d265e5cc9822e9b6faed6019fc8cf31a2b65d4270bcc480c6d07c246762d25fc1e78b5e88cae03ad07b5fb50da1c70f7d97997a6a4d3849055dff05adc75f8bdf1c7b1d086b0c1c6e2281a25eb79e2f83e269311c437e391111cffd3e1a0575260f01c890a49ee2dd72e0e3c175b64cbdcad192d5fbd9460c9ad726727b1e094a937e889a338c8f7f0bf6fb881ab18f0ce9b2619f0fa7562e22411ee65de9af4b2ced220cf598f2a040341ee312f410a161d30684cd4c6f529d336a2c438c26c4873c62bd4043cb3657462e526a31a40b48b3fe4a74e631cc4b826faa93eb5fb5c02ff0af20180d0c45d35ddaa5b21905e1b54099e07b5cd8f5f2e971d856281465fc79fa31af6c142520253967ce74ec555bab40d3d4417c917e28b4a7005e53450bc780f4964bb9a3b99b7a9bd16aff9d90280cd964f2d056aa120364ace5bf0258146d017a35f237fa5c97e74bd0c8cbdd6642adb62d2a930ec9bfd314fe8107c58857ce544c842074a6e87ed1e436d856f5dc491d6a96f8657a28d9e03e5735341e7528513fae9591ab1ce6317dfa7e43f458316108bdcaad5d5c67c3bd7c3109c55030d32a4e6346cc82b0ee2230709f19ef6c0614aa3774f800d9426283204ddd51cd5a4a463656348c1fc3053b55ffed2c56c2f1413f3c9c77f908a75e44a411470d64606c7f900d12dd1d7cf9c55265ae5e1c5bf2626c3b8de696f8ad521bccee9354f437fd5ce7d059f3a2361d4d331bdda024d70f7378dcbbdee7d13cc878b273c6b94159106b22d868187fb37540b150ed1ebff59a16e214286812827ed07b77631c8b37e66fcb6a65f06c8679df3e50431af614c283abeb9de8f7171896e8713915dc0094ae828f14c7a4de4a46351c4f2b2d0054ec09cadea3cbb236dfc0bc73ede5f6bd731bffe96dc5e0af9e6bad61569dadab3f726c62109a658b5c5f645dcf2b4f6d0c14fa9757afe5622618de69e44c0e5084e68826143132492fbe8e5ed3978b2b467dc715f03d64c323c92b1356e51d6cd8bf9a291d98b9ee9a10a8d6420d482ab4a73988058110a64310ee539282bd8e765afc8c6899e6f76f6b4750cc9c26815f5e7207486a7068908a2b02b7916b67892b5c70c829627ffa735f98e67c1d3dd5d31e6fda20953b02ed98b58304d3b8baff1e282dd8afa41460d95de964835364cc943d3e59d7c318c0f6c43c027e21583811928a6658f07410ddbc6740164a0bfb6a607a3e42c2696accb2b5a74a39495582dd680ca0a5db3adb6808ded69bcf87db25ce416bea43a925af54348018c0d7c8e598701df51c9fe5d3639e97fa3326be3d3adc67dbddfa158178523a092cdf39e9186f656db9e46d1aee14c0b548f3c87c5cfc88281578dbe8f5dc0d0554106df56d256183384c1a6ab1fc76c879bee118138becae36cb71b1940cbaa5871c7ae6f4368ae60673e41891f5d98a1137492ebcd938f0d6db615c0af4112e923890e48a68a84dba5de46548ede7aff398ee51ac1e194f9c414650ea15a8a9b5dedbb5ce1ec4a6721051f921f2a4d0db981c8b21f33b0552728d35505bd0ced15b639cda906594a1ac25eb0c395f55f1b23bb3c897b39c0c41c0f28376c38f26b7ca4231b6f6cb74ed3186040eb7b55c11bdab5d2b81f1572c17fa180e68fd8de3a0434840b03c55cb0c323a8c2affd43b4dc9521ee9fd336ce300d988512b962eb4972441f4fec44f332b5d78e6e89babe3f18df6a9bba2d6339847ee69acbf03c26c481f3367e8d1ecc9ceec89701153f9cbbb5dd50feee5bd71085f97a63ad620f1a28917490dab2940dcd379c6ba71a3c296e9a8b0fed4ddd854a0565e60a95d6d6fef2258bf552a44f3861f579c594e9111ff2bcc16e5614b4a665ac05f9dc20bfa65fca3604527986e32406d50ef66e136dec507c76063e47bdf812b3bd814752508ea9a7099c349c186dd201d5352abf75af9062eccaedd7c67a0d8714e22f3dd3b07ae1f6beaa77e90a499623527a462d6e209a90d92b48ad7c772a46a49db73fccf9652208a015eab51ddca1210eead1003c90d4c8f4834b8bd8337f5cdc83fab1f5e1e01194a50efc25d17008f2ec577046e699101e8d2a7a2303e1e895c0e3e9c84e68e3e3c671e8a39249a2980ada3f987011e8140fe5f055a57ea39923bd952f19fd4b9110f9059dadcf9135bde1a54e533132ca19316eca6a5e46acc220c4752956befcbfd1555af423925ba59f81747c19b3e1011008b63780a4ebbc68372641821502337b12ec47f40b5d587e704337ee1f6cba528d7c779cbd65b17c1c4db7bbb7905ea4569a2528506d15e5e09b175d1f5ce4de2a56f58ae47ed149fa8b3640331f7cb6417a4716fafdf11f68aa3ff55ccd4cd174a5a784deae5b3377d641a0af6b4b73fb8a30ac0f56bcebf022208ef55da5d2f6a33392daefb7f12b4b57523378b81940eaf3563b9965fe3472b9fdf03acb1147ee914e142c0d5cc32794b9b1715f78a5d0e41ebc9d677802ff3a10e78463ad01c181cd4ed71d16de05f421d40cbdd295ee98595a38ba125d6865e82e5929960bbfff9819047adc3191934764e8a2a89ff784299d5e8c2dbb7ea38c8f437ba56b214a304a56dd99d500019be550d0caa70acb771c60a09ab835149c5a25882df6769aaa032685e9f2011eea822d3af2eef82492d8e6d44b072b3a05983cda64093da5bbfe266c070b6b906a026e9545d4a41b8a74f59dc306bbf98d55e8c5e16247732336b9a351ea9eaf926fe3b070d849b49df2f21c4883f44d48dff7294485af47b2f461a74a95972bbdc3927513a5f77969bc9a6466818d3821400b3f3326c8ffd685796c1679156878a86724d65bde11e3c85b597c7c5eb86ee5fa1edbefd01789bc73dd3471682142b1fd6f19cadd62a3db38a91e536fdabd16585748aac86df435dd336b083f49777cd36825bcdd2f078b055beb22172aa366f1121ccba2d96cbe5d4175f60ae6867056b46448fe6aedc955301d314511eaaff436c11f4d886e10401e36c9d233602d6a1e8dcba3452be0c1072b38463250b49c5ea8bc59576a3f9b0698c13181f902570e30befe603716a4c6ee7b8885434b037e9efc0c24c075305dd4ea483e0f8f8964d8cdaa3b7e808f381495228dcefe29353ded4fe57103a46e38953baf04d83e9c7fdeaad8971f094787e5acf54a1aa871a06a9b825de78de35ff2b7ce6c41bcc281ad6edff9d37798d5c0b90bc545f539987c0262f092248ed053beff68d9306d1a65207d27df785fcd5692f717a057d065bcfe6f3d929229d469aac10e35cf7198329e1ea88d9bdc67ddc23d39b148e4af144d2b433398621f12b7d1dc14c569b8edb0c1950a26d64474301ace0bd403b525cacbb8c4e66b0e222567e6f66cc7cbafb7a7e3a7ca537c9e2eba61b956002a4cca3c5e2f5a9d38bccb8d97385644fea04082f4c9cbc9c11764be113c7dfd7a51092eaa8df43d9bef7d246a941ccd26a9c883412116ca160afee4983417b65b4e68553fa406792a15b30c0ffc381b243612e2be57d7ef7663cf404841b3a3a6bc8365d6be8c1153f37616f7b9b0ed45458626f7538551ea1bec442354069d25c8209116b377c882736f4b7ba8f56511e2309f55e2ae6c11c4a006de600274f2caadd2718886c3f4648250baa9166a765d36672bd7f7f9aa62a2cc0219750298613274a421fab1557d463ae5a1d51e3f8e2631f39e8c15df7ecb25b6d633a1598805397d09e85a47ac9673cccb7aeece93886da7f16e05be7dfde27d3e4db571931cacdcc0da365bbbe8a63634217cbc087bd2c7648b45c050e76ff3884b730fa179ad41520a41bfcbfeeb2f68f1e14678bbf6f8ffbe116fe10167d35fcadded74313793823f4c94e83e5f120353a482ff94933500ac32b2714803c0ac5ae1d87d8d7d21595d70b1a8e5c942a04fe362a41dba7c7b847b8ddb78b962fa384eea516a469c27b15a3b3359fbd3acb9df6bcf039f12a6eb8b5da5013e4aa4dd335361c7a1a3f951e7024d74a5de1dfc82529da244f27bd00ea9a15acc6a621bb6d411e0934fb9bb56ec62310e0dbedcf6b006402b471bbacf720e880b7fdadb6e9a41f116c3172d5d699d7e33fee7444e0679052c19f668b5b1daa3ad13239ce0abcd02c6ff391a436e693f0b184cb0e5e80fb1c53a789c41141ef821577e19d1910a34bf0660c7aa587722c384b9f20361bf620fb867284eb6efe6ccf7036ca607104474bbdf6bcc349448e75e4026968da51b14de5ed5bcebc3a29f1869037df14c3bf3c2909ee4ee7efedf3c17f0598119008146ed231f871666f705c09dca356bd3c84770b91f6a0bffe24e7fc85ef7b3d5ab67b3f2c7653a17f22feb63142dd3244344191f16a110b1103a83c00169664486f87ae9c84ad28ebce692c0a23fd60278037e8d23011fb751851b5060fc5b38d7e7d40aa671d8a65462145b01bfd09857dfbfe33d43e15a03b37540ec50cae146f972843e220aa35c93015b3718b44c77b5a0b95d1a332a5e57298e123de1342e9df733c5a6103541258e4f48461a8456e73529f1be5a58dec32d9d585fb73b275e9376a629249cd99ab85a4c8c66f9e019a0c170fb4c63b29872f13b3a8f7eeb6529e42a4a3177c626abf69829aa51f8d5b8953177d369d9d43ae5c0866d1f03584dd55e35d6eef268878afffafbc741d4512ee2eb8601955ff6a2e442f062cbc7058228006b73d341") 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe8030000}}, 0x1c) [ 675.642282][ T29] audit: type=1800 audit(1594052837.032:735): pid=32109 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16295 res=0 16:27:17 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf4010000}}, 0x1c) 16:27:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) getsockname$unix(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfea7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000360600000fff07006706000002000000070300000e130060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5b0008000000000000feffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51ba197ad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21af0031e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b37f0f57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74684e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6988520500ce2e9b65a34505d300000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cdebaf8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f1369126c3f54250c7b3639e13f8df6ff262b2c896a1bde69d5e4c633ac7e22b2e7ea7a"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_connect$printer(0x0, 0xffffffffffffff52, 0x0, 0x0) r3 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x90040, 0x0) tkill(r3, 0x3c) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000007c0)=0xffff, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0xffffffc1, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x5) [ 675.788211][ T29] audit: type=1800 audit(1594052837.182:736): pid=32124 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16384 res=0 [ 675.972524][ T29] audit: type=1800 audit(1594052837.363:737): pid=32135 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16383 res=0 16:27:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x8, 0x2, 0x7}, 0x10001}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf5ffffff}}, 0x1c) 16:27:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:17 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) write$binfmt_misc(r4, &(0x7f0000000080)={'syz1', "aaa150e11691d8571bfbe57c553277d8a619330afc7a9ecd693c42ff9d8dce4483ab51b31333d13bda894567359e07b1201eb1cf558e02de153fe5230ae53dc4c5af6805ec75ce2d07f54b016233beb675c34332cd8afda8aa1729f454b1e8e3e630219f65ff45f30d851532f8046ed4b85877f353fcc639918a"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba637346363273c155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f5602600000080000000003d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532548ea67d063ed4da7a1ff7fffffffffffff3dd3a2985b72c56422379260adf1d1b76b"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfc000000}}, 0x1c) 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) 16:27:17 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd439c6e09a8d629aae0eba9ddb0d791423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212836dbcb3fb92fefc0914660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:17 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfe80ffff}}, 0x1c) 16:27:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={0x0, 0xffffffff, 0x4, 0xc703, 0x10000, 0x3, 0x3, 0x1, 0xa14, 0xe831, 0x7, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/523], 0x1d7) sendfile(r0, r5, 0x0, 0x200fff) 16:27:18 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff}}, 0x1c) 16:27:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x36002, 0x0) getsockopt$inet6_dccp_int(r4, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 676.989622][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 676.989630][ T29] audit: type=1800 audit(1594052838.383:743): pid=32154 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15828 res=0 16:27:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0005000000000000000000"], 0x20}}, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:19 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00629cc0385c87b73b31d8294d86f22400000001040302000000000000000012eaa4dd9d40eabdd720f573d295d5fe72bec1ce68f2b53d6d1a26733086e46833fe5deab20a4e81e4b86f6136223e2dc58fd4005cfed92d1fbebe5f6367d9"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x1) 16:27:19 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c) 16:27:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143442, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:19 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfb, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffdbfff7ee, &(0x7f0000000040)={0xa, 0x4e20, 0xe086, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x4429c2, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:19 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff0f0000}}, 0x1c) [ 678.704841][ T29] audit: type=1800 audit(1594052840.104:744): pid=32194 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16335 res=0 16:27:20 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x402040, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) 16:27:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x81, @empty, 0x4}, {0xa, 0x4e20, 0x1ff, @remote, 0x38}, 0x1000, [0x6, 0x5, 0x4, 0x9, 0x7, 0x776d, 0x4, 0x400]}, 0x5c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffff0000}}, 0x1c) 16:27:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r8, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 678.839718][ T29] audit: type=1800 audit(1594052840.234:745): pid=32214 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16328 res=0 16:27:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffff80fe}}, 0x1c) [ 678.938504][T32222] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 678.978497][T32225] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffffc0fe}}, 0x1c) 16:27:20 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000001c0)=0x8001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/46, 0x2e) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x44, r7, 0xf, 0x70bd2c, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000001c0)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x200, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xfc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff561}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x150a}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf79}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe76}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xefaf}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffffff8d}}, 0x1c) [ 679.303807][T32237] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x208000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 679.392204][ T29] audit: type=1800 audit(1594052840.794:746): pid=32243 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16378 res=0 16:27:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x80180) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:20 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74f1222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2bef11e7ba6373463632745155e7f76d26b84e0e212c36db314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 16:27:20 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) 16:27:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) write$P9_RMKDIR(r4, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x0, 0x2, 0x6}}, 0x14) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 679.481611][ T29] audit: type=1800 audit(1594052840.794:747): pid=32235 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16326 res=0 [ 679.560398][ T29] audit: type=1800 audit(1594052840.824:748): pid=32241 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16372 res=0 16:27:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffffffc4}}, 0x1c) 16:27:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6400, 0x4, 0x3f, 0x4}, {0x77, 0x9, 0x3, 0xa3f2}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="050033000000000013a70629b2d246e1cdd4391423bbaf486c74b4222866c2a6a649db1366c8dfc1df144a3ad16576285b6d9476db8a119639311a4b8d9febc88363f14f066b4ee8fd6caaf752eea2447d56b35bf53d3da4b1e1d2aef11e7ba6373463632745155e7f76d26b84e0e212c36dbcb314660e88088a26979918871fe0071f9d1165ff95b6a69166bf5952f56026c471502e5372fa143d286a5849476aed6a4701212b01bfb1102f53a7f81ef064e00197030c9b2685a1363043532549ea67d063"], 0x24}}, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) r5 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xf8, 0x200200) getpeername$netrom(r5, &(0x7f0000000280)={{0x3, @default}, [@null, @null, @null, @null, @bcast, @bcast, @bcast, @null]}, &(0x7f0000000200)=0x48) [ 679.682395][ T29] audit: type=1800 audit(1594052841.054:749): pid=32262 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16384 res=0 16:27:21 executing program 4: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@show_sys_files_yes='show_sys_files=yes'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) process_vm_writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001200)=""/246, 0xf6}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000080)=""/17, 0x11}], 0x6, &(0x7f0000001440)=[{&(0x7f00000000c0)}, {&(0x7f0000001300)=""/255, 0xff}, {&(0x7f0000001400)=""/5, 0x5}], 0x3, 0x0) sendfile(r0, r4, 0x0, 0x200fff) 16:27:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffffffe0}}, 0x1c) 16:27:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) getdents(0xffffffffffffffff, &(0x7f0000001600)=""/62, 0x3e) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'netdevsim0\x00', {0x2a, 0x0, 0xfffffffe}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='ip6erspan0\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x19b081, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 679.819273][ T29] audit: type=1326 audit(1594052841.204:750): auid=0 uid=0 gid=0 ses=4 subj=_ pid=32272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 679.847142][T32276] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 16:27:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfffffff5}}, 0x1c) 16:27:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 679.953449][T32276] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 680.069142][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x8c2cc755a6}}, 0x1c) 16:27:21 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xffffffff) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x103100, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 680.423842][T32306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:21 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x7ffffffff000}}, 0x1c) 16:27:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r2, 0x400, 0x6, [0x80, 0x0, 0x1, 0x6, 0x6, 0x7ff]}, 0x14) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r9, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, @can, @l2={0x1f, 0x8, @fixed={[], 0x10}}, 0x81, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth1_macvtap\x00', 0xfffffffffffffff8, 0x200, 0x2}) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 680.581315][T32316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 680.651803][T32324] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000010910056beb14d481f962fa00", @ANYRES32=r3, @ANYBLOB="0000200000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x85, 0x1, 0x0, 0x100, 0xffffffffffffff00, 0x80880104, r3}) close(r0) r4 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) 16:27:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/152) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="1303001800000000ec00070000020c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xffff00000000}}, 0x1c) [ 680.707578][T32324] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 680.733697][T32331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4000000000000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5000000000000}}, 0x1c) 16:27:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000280)=""/152, 0x98, 0x40010002, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x20) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r7, &(0x7f0000000040)=""/46, 0x2e) getdents(r7, &(0x7f0000001600)=""/62, 0x3e) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf0ff7f00000000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf0ffffff7f0000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getdents(r2, &(0x7f0000001600)=""/62, 0x3e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r0, r7, 0x0, 0x200fff) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x100000000000000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x300000000000000}}, 0x1c) 16:27:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendfile(r0, r4, 0x0, 0x200fff) 16:27:22 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x400000000000000}}, 0x1c) 16:27:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="13030000000000000000070000000c00028005000200000000006f5d8de420527be6fb5843926413e1230fedd6c5fc4bee218189eb0d7903090b2c2048800f881921aa79feec6dc03e5fdc1ab0ada57175b6c6a3492b2e489fcf910d0e07c152d33c25b87b8833514c969daca1235e3d39306bb01560ce63791c51437cfc4ef07553f34c85c4da93cda18ed21d5a1d1c44f636a9"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x500000000000000}}, 0x1c) 16:27:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000c1400082abd7000fddbdf2508000100000000f74c0001000200000008003d000300000008000300010000ffffff7f0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20048004) sendto$inet6(r1, 0x0, 0x0, 0x4044000, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @private0, 0x7ff}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001400)='/proc/capi/capi20ncci\x00', 0x482002, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x38, 0x140d, 0x375063324ffeafe3, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004031}, 0x1) sendfile(r0, r4, 0x0, 0x200fff) [ 681.751513][T32412] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x600000000000000}}, 0x1c) 16:27:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r7, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 681.817621][T32418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x700000000000000}}, 0x1c) [ 681.934707][T32427] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x50e01, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xfc, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="57d4a8d0d7c4ec9e7ea99b2424940233", 0x10) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) ftruncate(r6, 0x2008002) sendfile(r0, r6, 0x0, 0x200fff) 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x800000000000000}}, 0x1c) 16:27:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 681.992326][T32432] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x900000000000000}}, 0x1c) 16:27:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13030000100000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 682.156852][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 682.156860][ T29] audit: type=1800 audit(1594052843.546:756): pid=32443 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16384 res=0 16:27:23 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) 16:27:23 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xa00000000000000}}, 0x1c) [ 682.276386][T32453] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 682.309987][ T29] audit: type=1800 audit(1594052843.706:757): pid=32456 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16382 res=0 16:27:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xf00000000000000}}, 0x1c) 16:27:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) [ 682.598278][T32465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x1802000000000000}}, 0x1c) [ 682.715484][T32472] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 682.732661][ T29] audit: type=1800 audit(1594052844.126:758): pid=32473 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16341 res=0 16:27:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) 16:27:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x2000000000000000}}, 0x1c) 16:27:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) getdents(r4, &(0x7f0000001600)=""/62, 0x3e) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000040)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@mpls_delroute={0x34, 0x19, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x80, 0x10, 0x5, 0xfd, 0x0, 0x0, 0x8, 0x2000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xa9}, @RTA_DST={0x8, 0x1, {0x8, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 16:27:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'macvtap0\x00', {0x2, 0x4e22, @broadcast}}) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) [ 682.897357][ T29] audit: type=1800 audit(1594052844.286:759): pid=32483 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16348 res=0 16:27:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3f00000000000000}}, 0x1c) 16:27:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x2e0301, 0x5a) ftruncate(r4, 0x2008002) prctl$PR_SVE_SET_VL(0x32, 0x2409b) sendfile(r0, r4, 0x0, 0x200fff) [ 683.091082][ T29] audit: type=1800 audit(1594052844.486:760): pid=32496 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16349 res=0 16:27:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="d9e9c70e000000000d02800500f5d12fd9020000000000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x3f5c13e600000000}}, 0x1c) 16:27:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000423e4400cf8b3a11d31b2fbf7bfe0e77cf94a4d971a1ffcda5670f004b083fc7da204038e97b1e738751bc31164b410b969f56096b7707791de0c4fda3781c16c00bffd17805173bd9187b9c0dcee735e1855d17", @ANYRES16=r3, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x40803, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r7, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x31]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8880) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r0, r8, 0x0, 0x200fff) [ 683.482529][T32517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x198, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x184, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa479}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffdd4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x151}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39e1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xc6100, 0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000380)) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}, 0x1c) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x4102000000000000}}, 0x1c) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x439577e300000000}}, 0x1c) 16:27:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x4) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c6e39c1d", @ANYRES16=r4, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5400000000000000}}, 0x1c) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x5800000000000000}}, 0x1c) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x8dffffff00000000}}, 0x1c) 16:27:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40400, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000080a010200000000000000000300000708000a400000000308000940000000000c00064000000000000000030900010073797a30000000000c00064000000000000000026c000480680001800b00010072656a6563740000090001007866726d000000004c0002800800044000000004080001400000000d05000300000000000500030000000000050003000100000008000140000000140500030001000000080001400000000a0800024000000005202400000e0a01030000000000000000030000090900020073797a31000000000900020073797a30000000007c020380540000800900090073797a3100000000440002804000028008000180ffffffff0900020073797a32000000000900020073797a320000000008000180fffffffc0900020073797a320000000008000180fffffffe5c0000805800028010000100c409d0f406728ca2ae5cfcfa1f000100e680332b08e0be807982ba2610f6ebd759f42ec6aa662c7d933407002200010030580ecfcd1b5d7c5117db24fced661c4744cd8fd317182cac26227e9bf50000100000800900090073797a3200000000b80100800800034000000001ac0102804d000100af7bf2f8ab93334a5d8f39f7d7ce74f6ce07afa6d21d77e04b968489c77a4e813b4e4f10a03eb6a39c0464116fba2fbe3f6df13ee82f61ec07da640b154f125f2d27aed3f73184f8fe000000f2000100e315167729062d50265518abff21d7e6d53e49cd7ee1b00f786f6f673e0935e107b901c96f0800631f4e51887ad53479faaa8fbfd4b3bac0a928cfd011ccbc8510d2f5bb7bfbde2d7763f4a5236b55b31861d7ed43d199e106d25ad6bca4f52d5b0df1ae3920c80f5650b8a5203a8f0acb9f2d71d38b7ab1cb17364be4ca0ef90bb848e007e74e997fc80e660eb85d1e051c394a7814699c172a7c727d84bb5eb18560438d5525bf7afe84038b97dbd9937dc6fd2013ebab4ebb0b2460ca5006a7b9d8346261a9b2678000dc4b239c3efa8dd0ba126482dd56d50d17fe7a6a830da214bfe0564a636dd015eadced0000640002800900020073797a30000000000900020073797a31000000000900020073797a31000000000900020073797a31000000000900020073797a31000000000900020073797a300000000008000180fffffffb08000180fffffffd08000180fffffffe080004400000000350210380b0080080080003400000000185000640ada4db4e98d6651205a1e98c06192c737b0beab01f0399634154144a9e0ae4ac25a6aa68642cdbb9fee90dd12773fa617d865cb385d756fafd9b58151435b37328deaae7ea6189281fcf270cb379bb9eb5fdd96ae30eec2e50eaa00c4b7327763da57c5578cc6be177b95d067efb7707beb2a7d2c46bd6ba2be7bd52d8cc4f3f2b000000040007800900090073797a300000000004000780180201805a000100f46e01ba3e21f90679f3c540d723ec2da564c646ad6f051016c0a0e1f06fb0cd003db9ea3d202bb2ab6b130321b01a8ef5ca2797eae017582108e0ca0256e3162912d0b2fbe53ee2766ee0a04d09bc4dea381094d9ee0000600002800900020073797a30000000000900020073797a320000000008000180fffffffe0900020073797a300000000008000180fffffffc08000180fffffffe08000180000000000900020073797a31000000000900020073797a3100000000100002800900020073797a3000000000100002800900020073797a3200000000540002800900020073797a320000000008000180fffffffd08000180ffffffff0900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffb0900020073797a32000000001c0002800900020073797a32000000000900020073797a3000000000c60001003a5b4351def1db0ab13fdb2b0b0a51454db465ab222c677c0c8170e17f3ffa80ab8bda365296fce3672b2a6851dd8849998edcbdc0f4dc1bff890c6219b48e26d36b84a07665cb62820ff6a673ba861e11e6f2c2f22f843439eb372acf2c65684b848b2ec0f6986d2a1eff22ed82d35757d84de45209acc910425e175355faa86fb107374393919d211448a3527bbc6793f088de86f94e116e5c0b522f1cf48e11517e169c1eef40973a3d78a52486056acfe65c738a6d62bda4a2f459e1678099ce0000ce00064065b3691c33fc911ff222a60c8a04b89c1a99eaf4bad0f4651e3d8314346ab2c452708ac69a37043e23798d0f11f02851981e1e9e01424ac8ecda469dbaacbe1d823f11b421ad9be46b71ae18e7bd2afa7ae008e3bb285ca093fb0dcd74c880a8e71e25bb4ff978f6bbae0cf3026262a3312603855b0d046496e8a7b12ef3cbd84b8de1e3312244438e2ce7974230470c479a99031e4a72900ac0d324db28a7edf169f0266be23f49cb06e4e3c5128fe446cf5d88e36d18782fd5c2ba79ca4efb49557380ac54dbc50b590000a403028091000100329214899bd053e0dddd643b812dbd4d145ad70480311f64a6db3d2ad04bd252935615edb9dee93c1f2b1d41078130850560f77c5af5e2b67173010cc4dfa3bfc7fcdb98acdfae0a54991c6c237cc8afeddcb5a939c57d642fe7a1ee7924e707cc1277bc9dfa89cd03da3c316924c6ced01ef55e57e1f39b92a39ff991c4e2c3247570db8db8e98f6facb75764000000d900010087e358d092e5d974536eca8c0351f893b263f39bbdedd5a85999033b7374c0f9ccffe10fdc8d403a9802e20b55c7a41d8c6596227f08f248810b721751ebde50d2b01db3362850305c99896c306370d1f6bc769c6102c74af13df7362458a6227149d53823b1deb902d6b014fde39a5418d87b3b712457302f8991af9a1450a4fa7c5dc3836511165072abfceab37da65b90aff115fd13055c2af3395426eaaded3b9e31f3e8e93c5f9f1fd48580adcfa984923976470f94165468321f7b2f90cb218a66a8596608797875abe5a37bed062850619c0000005000028008000180ffffffff0900020073797a31000000000900020073797a30000000000900020073797a31000000000900020073797a32000000000900020073797a300000000008000180fffffffb400002800900020073797a310000000008000180ffffffff0900020073797a300000000008000180fffffffe08000180fffffffe0900020073797a31000000005a0001007948edf8b585221d0ae851b971d107d098efaf737b86522035a607ad734318c1039c18b00481a792ebb3694aed7824a9550529ad946e1d3aa9b3b326d6e0bee0d4e0d185da213ef6e115bc985c67a823086687773bd100001a0001008b861e96a7413abe3d6315ed111f5fe5a55cb5d5f8c200002000028008000180fffffffb0900020073797a320000000008000180fffffffc5600010034f664b290b92c9c746b4485bda189a635c3bf3f7a806e3747b50777919a5026fd455d62a4bf36258c368d3f58a79f6203e383082ecd13ba7778bdf378019b1e68b63f48bbf11fe1a98a2f29b866d3ecbd2e0000920001006a66c53c4808be4affc8072841a8cd927954710309302ff57200f37808d45a2588874df919427ebc984847937ac4de725a60777c4f4714bc540b3cd90a2deb0543d6fe9a78ef867b9084f88b7e65cd3e8835127efe5fc2b0d0e291fba380b308e6bc4c210f79d467e677059afea2222f7ee6b01551e893ea53231727ee054b333fbc46e6d89dd347aa93785ee31500001c0002800900020073797a30000000000900020073797a3100000000700102802c0002800900020073797a300000000008000180fffffffb0900020073797a300000000008000180fffffffc540002800900020073797a32000000000900020073797a320000000008000180fffffffd08000180fffffffb08000180fffffffe08000180ffffffff08000180fffffffc08000180fffffffe08000180000000034c00028008000180000000000900020073797a31000000000900020073797a300000000008000180fffffffd08000180fffffffb08000180fffffffc08000180fffffffe08000180ffffffff9f000100987d18df9e0746b6a64ee4bb165653abb1021144ce0bf4d32af407fee7159fc33c36940e072f598a0482eeecb814f3374f7e9fc5c4631a3c7358bd2f9b788f4c00c0e2fe89a154ee3c7f2bc72d039480eb13bdc6f048d2a9b23fcef1265282597f6305a3ec3fab7966c76ea0f3a242cecd0a770ecdd2fd3d4a6c3c516c17bca8f5a0128f594b774a9031959ccc7c6cd3fe567540112e3605f62f75000c0004400000000000000000d00300800c000440000000000000000008000340000000010c00044000000000000000010c000540000000000000003ff40002805400028008000180fffffffb08000180fffffffc0900020073797a30000000000900020073797a320000000008000180000000010900020073797a300000000008000180000000000900020073797a32000000004400028008000180fffffffb08000180fffffffe0900020073797a32000000000900020073797a31000000000900020073797a31000000000900020073797a310000000057000100aecccee7da80b825794c63eb1aa1bc654a9b38d2840432d9e6c8fe91946b8cca9369111d89a018b43bade24fa42e393ea5a1727e775426237f01c611c22220297ee25b5fa1b7262055725a429c9f5678eedb78000c00054000000000000000020400078088000a80460001007296f46c1b94e7b54183158c62ead60fa8efe4a1a868be9b1ae258046a904d5e90827fe7e272af4bf07b348394c824db1a941b7a11fb39944fab8361ba7e8c93af0400000c00028008000180fffffffe3000028008000180000000000900020073797a32000000000900020073797a30000000000900020073797a320000000014020a800c00028008000180fffffffe5000028008000180000000000900020073797a32000000000900020073797a31000000000900020073797a32000000000900020073797a300000000008000180fffffffc0900020073797a3000000000700002800900020073797a31000000000900020073797a30000000000900020073797a31000000000900020073797a300000000008000180ffffffff0900020073797a320000000008000180fffffffe0900020073797a31000000000900020073797a300000000008000180fffffffd100002800900020073797a30000000002800028008000180fffffffb08000180fffffffd0900020073797a310000000008000180ffffffff7c0001005176bcee18b6359198582cc441bbfc641a38771ffa72cbe8c33a0b66193195a048ee9372ef520d68cb55a2b2d75b5484f9f74e849f304eb4f32d0222665c7b82467a9de27b6b8ee523687d301f0d0c8d2ae632916f4b01bec9569b7ee184425565004a0b5b659d36844470805f2f4fc6af4e37291f718b422c00028008000180fffffffb08000180fffffffd0900020073797a30000000000900020073797a3000000000620001009e29a98319c1e1da7aa8b8570dbdb79034f2d9e721a4a5733be5a61e05d5046b03aac4113b3d7573b0c2a120b8a9940a083c750582a07be16de7dcfebc97789136f372a45f06849176fa897f4bae3b183c145067ec2a8a2a8205ed3fc9830000e400008004000780dc0001801c0002800900020073797a30000000000900020073797a32000000004c0002800900020073797a310000000008000180fffffffc08000180fffffffc0900020073797a30000000000900020073797a310000000008000180fffffffb0900020073797a31000000003d00010006a9c77c6ce7c06d6b9c0fa9cd14031f96f239fdda2f4706605cea817a5c0695f9ece208a62bfeecc3ffca066c3c71bf3684c5e24656b3cd810000002e0001009f32dfe6438a51de16a5947c96e009b6eaaa447cb9c448cf49320ced186d34ba94d667bff33f111dd12f0000100000800c000440000000000000000124010080e80001801400028008000180fffffffe08000180fffffffc08000100c5d4cd74c50001005eb9427e9e6733c678e6e1c2308f6a9ecdd3c5b2b7a50e74f278ac67439f08b47729a8d822317b5b092213476a3a14e15232c041143e848813cdf92e99fc8dfd235aebb0bd75386709b0c490948a6df166a266fb360d62923246d6299aad464c21e7b567ebb6be9a2e1934fd81cb9f01f440ada3bdd286d586c9c886cf1a5a2c4564f461dca6a84a7ef36aaf13fdc44184ba7d865370bdf6198a0b6dc0732ab1c704adb32f50c77c6ad8da15b88456486373a95eeaa3d07aae275054b7a8739b1700000028000640c99957cb5bac30739f416d98dfad9e3fe79ace117e9309f63063d0c0888502502af0208a040007800900090073797a3100000000a01000809c10018004100100902472f71e1c880a5f053b07729a8b5c1fc4fa6bbfc8e3d435ddd9b27ae3b78da979789d3cbea381147c6439cac990cbc58563469819ca0bb6f64f390fbefeabb616be063f9e8e9f811f741ee36bfb6cb051a31d002b7cbf1498746c90a6c5b98b6604ea10c76070faca870c8ac12dec4f398fce63ab566e8359af935f31fb598e1afcda61725c3c0b292a3fdfb94b9b051ac4acff82a6be0b5cb85b9c46231a8cab5a83a3925350ab346b2c11ea1f53c2f298b024141c614bd2b54b3417ca86b37a48c32b70ebaae17075477fac2d6e8a1988952a5f9344ad64535b728b046c63e519dab0a7d052d760da5faafee4d18d7ee4ac7bc92200707ff4f3d701cab96c04d51f1347c675b9ffe597a63787779ca991a6b2b2f3f0ca53444d2443caeac3348c23ae8ff605af727c1f6be94533e15509cf4da8aee0b635b9869ae55b72ecb3df8a7d9c42bbcb038318cf23c3c37f848b5776881db961dfd9b69d82d32f32293784df30bae75ee16c391e484bd32e7edfb1515467692571f32fe4acf2a947595ba216cde66b4fd58c70d4737080e1a1e7f608fa6fea3a2f8316f09d2e84020ecb893d940d13af71fe1f56d25386adbef230ad3e3f999ccd1b2194fca1deedf00cccaea5dfbb633f1363eef1ea505c3a43104afa8b45d627d569a85c53d6b9080df2443e5d5785321ed0e1c5fcc1627c6f2548711afb049f648713da4eab4df757bec1344e7948d3f29e51c2a59a341b2c2674cbf03911d1378c64b8d71f84d4cd5b40097e4e9dfac6e38e91dca997617474bd7ca07598b869ac823baaceb9e3a533bf6d32ea4a592ea3aabfd5c96603113da6aed889db1bda716d3ad153e7f27ba973fe937cbe9de64b5029dff2f42d94f64dc305f0c43894e61cd6d5f44ca61b1c6ff4d57ce58aabbef87578b82eaba0f4bbe0d89c619e0e9b2fd21e2796a0a826949699f009ae4e6782ec0adfd5a62ccbb4ba5321ab24dd8fc51b8cdeedb1a803f80eaf396423d9a5e2c2e9f0177dbe6f770514621513d27295ea4b786b5914a482a637976e0166b423f4f758f07eb50c75eafc69b33e8dbb1605df886dbc0012b79bc1c62f70cc7672332d109ee6a87bd2dd96994bfe1e26b51b4958147cde57975f75d2aa8618b639922661390d69f7bbd34e2cb3f055386f93fe3f8eb03c251b8ecf78d5721813aa670d374d9d9021fde26da2693f4d06a5747942ce3c2324856c249289c1b381a8f4b26efd79992d5c66ee5dd002ea0a8f1a13a3278150438544c8b4624058ffd06109b749557668c51dd58cb19f1046a354e7656c0e351d90fe9ba4a0e5b6debef2969eab21f81eafb150fbcfe264ebe9551c3c080c2b0cfc6fa1b103175dfcd711eebb5ccc62f9575f78d4ab5853be52d56b314a731fd43d5e706438a183a7e5056a2c1a524f1d9ef19071c7f21757525278fa67bc07f3a082feacdbb25de48e6a8c8d475fedad51f6355e934a91617213111b01aab25621b299fad95f620d18a06ca592578c285222a54cf97ff0c1138c68df6a46ffae36182bd35ed1c037fe6b5560bbfdd58496368ad4173afa2bedf9125b2fa45c51554b5bb6765bdd9fc84a0ead5dfa6397f075a63563c04e17397f133743cad5d937dab58c5796e6799c6bc3aa059cf60ec026b9606dcbeddb3a7a30c29bef8936d6f70820e6e043bb06791e4e687d4bdccc698777c07b56241990467e9026cb6b1d432e0e98b52eb514c948106a9d0378cf025f66ea97fd79d2ad053b6278e9d2ee2ddb5e5e57164c33cb8d9adcea67dbb516fbd202473cb279042c01cdc379e4b438e19a20155999435c314ea09388bbadf4a4aad0b94222ff1b49793ef062e5bc003099826df074235c042898c01a2a5c3614ae0dacd1f7f86319d7fea7fb0fcf8ab9144d603413b60ae5595e205375983281df12ec8dd73cddf4c21dbb108c2057fcb945e4b06c5f1b09b141d7202e2febe5a7b5958293bb11a223293b52faf7654750bc7c7787aa60e14c44adc291ad8506687cadcf550c9aaa525a41c1119d8f9f8ed285df974248b27e602b108619449a715f33e6e8307fbbec8b8ca2d148f1fc103973fcff18cbff43f8295428d20ba0fe1182bfbdd0276c7092bae189bc97b7c2a74296cedbdb644f90d9e1aef0c3b98dfd6f9dbaa01a30f9a81208f8d950ba9bb7b925fba510a2d723c5e129960433b07c850043ee60993a5bcba0852b4fa6a7c12db51a33eed6a646a1e9ba4534d4dcf1d52b43498e8e4f9cb8945788cc9a4d509153b6fc6390332a4ec59a0060fc800664b787652e044c156513f3f797df5c916fd01b42c96a3b220b69628355b69004d645238070370a5bf32e42e0c9e5bf0617a39b3328b7357ab564a41c9cb240d0ac3d8a1412404c93435bf8a9d859653a3de4cdc161fb665030c657482764b7c8cdb1cd9055a3e122bc7d66d274fb11cd3cd2ae323f2d19e7ee239246ee265fd1878b357f2c02420dcd028c038897f895f8fb5c2993d2710c88c9a1b075f7248e941dd1480c9eff3f190fb7a6f8e39f6d412ba333bf699877f4eed56261c87b170edd3f8ceb8e33feef31fe6cc413cb66ab3a150c377103d85f436f878bb5903ebfa787c73929391e3074d8e72192333308215e0ed7286b3a04934a6d839e9c948c43cdbb28645ef6a43279d3e2fa1c9660fefbe4977da5e09d21c0e89c41b015d491d0368b43a92c84f02562b4ef38fdf54b687f8599cfca761d8a78f578f36bd70f9bff4cffb5dc76c5342fd6b1ffa005c0f395f96b9e6ce6b8f42b2bb76b51c71421abb523192261bde7af44e0a99b793910e99a06e5b943ebad52b71cb0a74fcf8ec0d562565439e81bf88e3fe3dc490f3595607946efd05eb0110af114a6654d08f6d4e62db3cd9a66305004caaa6d2c5f19fb8aff2b50a028fb416943d354295b23efabf42419c537c65f7201ee130ef60a8b2f865c5217040a0dc3254e25680a3d78a703beb9e800063e4d5cd2d58e82632c89b912ffde659ca1af90a3d1c3c2793fd1d17d42fd6d9a281f5656ba88e9dd5e008823d8cdc87e069377a197a3ed5b7dd1d87080234c108e4403ddcbeec5be0c328a4b163f365a3791e10d283895f60ed435875fcda6561242c884bf8e0bfe8f802a04a111c5942b57b864588c26229a4681037fdab08b0b8849da22e357ea16f146248bc3413c65d5e580e09cba8120a562d8e786cc77377623c84aeb02b6780add0cb9de05b8aacf0f901ad42347d5ac0c8a4ac908886b6f2c518b320f69f23a365d7a25e28d9407cd975c3bbdb4bdddadbca8b6729df652367fa6035c9a500893e248ab0c26edbe438879498d220dce3c535fde1a8ca206591d4a82929e0feab48c875a9976fe63dbf1f0a6d68e022bc8d321b7855d80411cd2ce75f781e3d748c66c185fce63a3366534f915d46c91fe7754d73a8d92d2f922dbacb024cc81a937b4f0aad7c61e83c38552b5ffe74551bac0ee2757ec6ac5ea2f87476d1f790e391ba93b2af5afd755c88d4a3463ee76ce361be4a88f47ed18625370bd9f3f271f2440c24dccbb9e1d6cf219e22ec01dca15b125f52b9ed2dacb481c3f1bef70d8f671ffc1ef2be2fbd7e5ea4fb62ee753d1ed0ddc69aa6f14500e691db37418f3433ff43340d7c1f466acddc58d0b5c971a61d4276e3ea246d16d2457bba296f0a756082abaa7f9864f34c331fca75dcdcb63a39a65d09b8d98aedfee9b53be0db20ff0247eb6adbe6b527866843c9d8126ed8be97ac90e491d4fc0d218015718734ab2c6c7c31571fb2a98e62dd7fc618ba3debe4164914a732a04a103f2ee508e58e14851b7211f8be6ea29cbcf3f6220b5f7e92423f1585107b6e188a1585099258ac8067d0e96adf201863ef1f75136884463494b0691deb16ba834eb114f9bff9aeb3b06e884bc50aeee8e78b0a84271505191cf98690c32b12614b80b340a4b0b5c870dacfb13603f2a135077cfa69dc81204b8afa28ae3e47acfe032896497813933210ec8a177300464357798cef3caffbc89b2e3d7bd97f4b7d330e75a5b9e3afc53be82e38cef45fd1d7b7d7773cd40a1dd6f437152eb3c3cdab416acd11c4e697560b561bbf6b59ba8de09d6ba985b94aa0838f07abc6aa1bb9918a7097b1ff048616b85db047eafc5bdffcfe5e7a918fe42bb7458c4e8efc0ba450d98cacb7d85ed0b94014c116f40464e2fa8e5844eabd56ba11e84f9137f5cc6bcb92bf54d0014e1ff2896b80d517479071e830b0a234fdd0ba473e45e87b763699657a80780b03a8bf386d73932626626d68d2dbd3529c4316c747a6f38af6498ed48177014931ebbc131986c6672cb2231a3f8c74cf7db825bcd5fa4228a9379e1c7bdc1db0e772fd417476846ae69a4484011802139711b1234d0438c549bd8914197ba5aa71ed6f1a0c6b4d59e45998051c9d8ce2e89cbffcb0a356df672ef7635bd6b83d946295ca1a16a232d8604baad85f8d98ab1c3cad9a929b39b2148cbeed833559f6ee5ce3f4a76fd52b4797c30e95d938f33d8aa33bf2145b66555d70fa150128591f0388ac1904c8e86a9b1322f9b181285b973efe8652d4ef85d20cd643bfb6940be1a840936b10182b447a3a6bf5c493230c0faafba6569e7c4bae44ace1f954b07a48ba1bc5be943074855980c99cb24648f948ac92883f1be081edfe5df54b5ab1b95404aaf9acf1a90d76d3a616ce42571a3b939c4b60cf1adfaaa75d6e3a4cd84e20c509b74c11bbe451109c86dec299a7c4b3379954a683f337b1869a5f6c1c900c348f434960c29e2d26753c3b3508717b57ec009a991a4ddd8d784c942ea0a2adf5aac3d9c0fb78839751b26632a0ed671819cac921e86f3e1a607a12c28f3cf3ddfa04b6a1512caaa62e539762b7dc3f61ea6e5ad1017b62c3d1c1572bfc7ef30dd9dc32dd82318b07fbf56f6e3db74c69b45633a57c5ff9ca5fcce7341af288a90433624b3f67c610e43345aba7a8526c4d0caa98b2f6794ee21c7ce0e353fa975786439cdab63fd4911db09a4cc8d7a6276a0f7dbd113d31dfaa45f25b1a103ca0f76b29aa48c6d8aba4af6d32f15a9c0a67657894586246d4f426c0cbc2ab10bae3ebe2a74b804cec5b3ef484168419407ffdd5873664c92ba02f8dfaf71b67e96e0bc20f66cf1b1412ed76236446ffbf859cd84554052e6fa717e758220841bf18c2bda349ca425ce604c9db86ace01e540b67ed7754a158493553741563fb8300551db5e977402e079bd3e5dc413c9333c24fb56a9850409040f68cc4377ccbdec7e2e61e18ffb6ba5e1718ad1249ed30fb2a40de0843458068053857ddeeac9cb67f5054af77630ad913e1b59523e2c657eefa2ceafb6aeb21929fac5fb2317844325bc19c5277d54a07941f560ef2cddba10dd4db310cea3cc412e8e1dc6f0fc4aa80e01afec2f805dd2149a07311808d4d36708c868f4fa081058394b5bc2292a9f2ceb4581b782732c066be416749602790fbf87246310bb93d4e2259c7d4a0625ad0b73e65dde678874393ade01879fc43ed651d006f7d9f3f8768e1f96c7735d5bc37bb453de97f0193c5a48d2fd7dd9d4df127b09732ed080c5ba6975a65b75c3e87e128270bcf0b48d89b84d7b6e900fdaafdea8d63b863e200d07feca494dde2810d9c7bc54977f81c137d5667d230b3ab814c5ad90ec9b6a2cd1db701f6a2c47569f5abb308e29f6ff7a965be9eee8e6f1fe185cd6850d5838f28a977a91ba4d3094f025de96ecf1e3a209c5945bdce856e13df013676871d2fdb25a7700010066c587a8b6f529622a2b540fa7aba6abbaa2c20dfb9e2b4b683dbbca4fc9170c9c4fb583957efe1b256bb55a07c0da66488690a86bb0e15c7bae64aedd0d0898006cb487204e449b3d7426d73981296d8abc03192a77044a55b4224351ac610b1bfcca0908a2373595ed51b8e48030caf6c0eb001c0002800900020073797a30000000000900020073797a3000000000140200800c00044000000000000000020c00044000000000000000000c00044000000000000000000c0004400000000000000fe70900090073797a3100000000f800028045000100b2bfb0608775114b4856696b111192eef6df765cda32b0f372e468ae3080e83748855de8d277d59a344920226c2fae92d03a40513a98008daad964bda18e88f3f60000006c00028008000180fffffffb0900020073797a32000000000900020073797a300000000008000180ffffffff0900020073797a31000000000900020073797a31000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffb2000028008000180fffffffb0900020073797a300000000008000180fffffffc040002801c000100b431a91d522987894b19145606240c234353fdf95ebf8d7d0800034000000000d40001801800028008000180ffffffff0900020073797a30000000006d000100faa3e2cb0d10d3e1b86d07b1df5e89de4beea0a7ff6e21fcabee784622353b91a9b25cd9545727213678fc71f94b1919f7ed970d2b9b9c93070babff31f580a96f170afd08655eeb162dcf2a0b134c1de1aa754203250f764f1780093f4c9e393330d1ee36a04066ef0000002000028008000180ffffffff0900020073797a310000000008000180000000000c00028008000180fffffffe1c0002800900020073797a32000000000900020073797a32000000000900020073797a310000000008000440000000020900020073797a310000000034000000180a01010000000000000000010000030900010073797a300000000008000740000000000900020073797a3000000000481800000e0a01020000000000000000030000034c020380c00000800c000440000000000000032d90000a8043000100a95a62b6131b8c67d23b34b83be3c259979e599b5a02120b8dba0647537647ae264710e2242787705c87ed85178aa20956656029c44f10c74d609448be6bb0004800028008000180fffffffc08000180fffffff80900020073797a31000000000900020073797a310000000008000180fffffffd0900020073797a300000000008000180fffffffb0900090073797a310000000008000340000000010c00044000000000000000051c0000800c00044000000000000000090c00054000000000000000096c010080880006408e6126d74b326fafb12543af9593294533786290edcc2d7f86ebf3cd932369681f9a9b5caa6824334a5ee6c83ac84953c7389bf261119bd632ced118ed222d9c30382b7b214611c7f84ff716ba5c090fe485ee519144ef46667aea3fdfaaae641631b831af1b5c60009f5c1835f3d5218ec519400f2d83140c8055232a5b182f7993876de00002805000028008000100000000000000000073797a300000000008000180fffffffb0900020073797a32000000000900020073797a30000000000900020073797a31000000000900020073797a32000000003000028008000180fffffffc08000180ffffffff0900020073797a310000000008000180fffffffe08000180fffffffe240002800900020073797a31000000000900020073797a320000000008000180000000001800028008000180fffffffc0900020073797a30000000000c00028008000180fffffffe1400028008000180fffffffc08000180fffffffcdc1503807c1400800c0004400000000000000002e4110a809c0001001db83d78743ef57d003cc2dab0c975ebff596a6a9aab5480bd94f1549d36eed02eb59c24fd74868b12f1609219ee39c6cab2899dab87fcdaff6ef4a82b2006cec21dffe82c0fb7c348e726590c6863911581e88a317b3035d5d5db4e8fe7365e2dadb912d543768ae81868795da5c9a0d5c8728f275587b647d14e143062e9caaaed922f29cebe68c9009b96fe55a67725dd57963b0ec7873c00028008000180fffffffb0900020073797a310000000008000180ffffffff08000180ffffffff08000180fffffffd0900020073797a3000000000190001005c92b38cc8da506ee92925046f533b1ee54790ca8800000014000280080001800000000008000180ffffffff4d000100f71a3634e8bc887e610af0abb64af5795442b5b78aa871bccc4c817285cb23018715a85aae0b90ad4940e7a902c869b72d23bafdae3b8717ca07aaf57a11fa2d7598a2eafdfce8837300000031000100441d82186a9850ceba45fddaf1e4185f858889a9a2dd79388148358d3fe5b9613de1797a4d741333fd1423213800000004100100e4fd36c911ec408b7a8b695f132e7172174ebffa13844df81980f8792f1d6c95ef0e99b4b9f3710c6af67cdb895bebece9413c1d204b3f98a042ea2d465d710dceee215f026f35151665d5c994946725e0b50039d110974f70229d4a23d82c58abbc113c9bb761bff605d3cc4b9506e196de72fdfb1f8667ced60efc5d8a59bb2032d8539b933e7941563b4bec948482377affabbaa0798963621bcea15cbc68c3693d98c5d8ad0190d3d56524344da82f2b32a12d804361c68ebb18c4e59d59d3fb8f0601144af9876623c2b128f0cdf30099e826c47b970a8144f9618c91b6a0d1a811c50cafc2fd16b3bfc828fb7388030d4814e3d6c8f322303957972bb1a72fe99811a883a0361398e048886b551f9686d37499e81b8ae980118b34353f34344da726233c104101a752869881fdab70f623e63524a6e23fd2cb6b7091491a97fa4ff264c1c980b9ab648bec2611e29760b08758f7ec5ce7b3e9f9f67d32d0cd473063a0ceff1871be3349787fa37d8814a777aa7fe9dc825153bcc0e5aa97458e82e763e3439bf80e412631ebd95f646d7ad9b02ccc8188af2efa4aabcfdbb8d9d9c8c6298a32b886b2e3feef70f48c448d06af02d20500261083097cdd72b737ffe8664992de020763c1b0deef3a53d71a16f96f4fa94d14b50ca8432602dbbd226688ce6c43c0cb3a72b5ce466d2a7919cd9259313583e1d6c0503da4ce370e9df55d23be72f6ea9af084bbe6ae556b71b0dcb02e95b124930ebe210d401c936e57e85aac40dd1fae56a8b74da9cd851b626b201601261907d80e212b9f89ea2ea52e6bb2e6c7f933094cea0b968eab2e4d0787e302cee845961a410b0e1960729cc8e47277c647c7186a6895808fc75ab4b099e88010ebed51b50e6fb1163ccd9be8b6e9df595edaaea7accfecd462aecd27fb83868526559f973ebac780c370ea0fc64231565143c262708c84dcf2abe95f159aacd003aa8a10569a2d05c8df45686ef9d7d9cd71a589ea13bce5b5331f6ece1769edff65ed1a6bfe2213a673ae5572b1a5e4990049912b7ba1028777c2e01131ce5e8e6d962f1d91b0abc33ff27b93e9040ae8050b0df86dcf01d83b1e39beea4d2e0eaf7f8ede8fe13d5b6c85fbd53894b874d5bcff8c140eda04ba32d27f652e84d6803ae85e581f52de4a27112e1e2db4e5e12fd382aa2eadd1fe117cf75ed4170050cb35fd913b8026bcd6d1a8bef69aae31ce026f60a295edd40b84e36e5cf8d7d2fc4daa9dcace37ee7df0c1dae928637186d2b2badfa73a2302bf8f9829b225c94b40f1c666e62455138ff17b3c31e9b241c6a9215128314bc9e1fb222ae4404b3a4094405acc0c564bb85f2d0b6a034c2209b3d32241ad3f8ac5514b7b292c89318a3482584a689d9602b26910782e2596d9f3ca62908e7f24da21f3395512934bf56007347bdb4f3eec6a44ea5510726b86a0111ef438caeef44e98e92b1a6c0f88eb6b250700c1a267cb9dec5492cf5f5e7e19e2b9577265f44a7e85a86e807e00268eefcbfc6b43003fc225fabf4936082fcc82996bacdd804363a10e8ba5326d7851e13d4ac65c353b6a55bfb1f1d4861bace7a6f2d79987ff3d6f1b2ebdefef0fb07c360344bc6631234b7ba62e7bb39b546a4fe99a599e06c300022f3b80a7fd5243cad6e0526d71766022e52e16354b88541115715d9a73f34a247780cc82d1b83bb29bcd13ad5473e871ab58b6a2d515d02227c106e5a0df3ef6585402317865e95f0e482841af31a4da03da31de592057baf936c4928538ef37cdcdbdd593bb4b2601788eea1c524a8b98d5f6bb82e5e32626c4af53861615edff9a83c120cd17e6d47e325ced2672b79dc0f6f99ba750da3b1f30717f358aebb980eaca5ca12c882c05c7d7a5f0631fa9b811aa7bc7917743be4c55320e21b4675579539adf7746d85e28706a476e8a1497b32ada4752ba7969001b1f8898646f3180b216fde9431277d26fbf94f6e3f1eabc7c031e8a81f036173ccb60a822fce016da0bbaa6499a11ab87bc3378e5e45e0f03522cff14c8e75c49cc468d6172b16313c787087bceec420559698ef95546823ce2744d2886a752f71cb06bc044a7a661409fe30810a5b1c8bf8907a168de27b4eb580c23831007b7dad8e3caa44e1b22a4bf077b100cc6b50ec16ad9e90e9366f7e5e47c71ca5a8a0d47378ad6d2158afcdcb2f07d727c0e819280193922a43694430ec4265f4383a7694f9e40ce4a2a7cf4f1b978d221e2db8fadb9115059de95bf31ba0851e0e9cbdf4576b3f4ad72b1af436cc781abb6991c633127d3dc1965b8d4b010c6537609547388f624209e95004f537c1cd0ccb80cdd2a34cf8ffeccf8b641b5786c1ced443c64646feae20bf3ea86ed333756fff15a676c32e945a68e5312f67791eeeb5e42038b16cc875434694adb251d97b321063e5247387fc0af2dfa5268734242c885bcb6453592ec5faa516c430e841a682c12efbf5b42b5abefcca26a43b88bc08b36dde88524072f23e304d57e792d3afbc9f8ba8466aaf9d11ced6da739a958e6e159b691651e3297804a8578aefdf5b8e2e38d75eaa0ccffdab183571deebf89d86e3b541d9b7ea31d0d4ea0f2b44c43527971ada44bd3afebef3c64a61bcac77a87ce25ed9ae0e63333973bfd3b166add4ba9b0305895d6693176d532ccaf0963ccaa95fde77c9fa92e4223409c7b0b1049ec1ebc45e6da8b72ac8d500143f896ab1e99eba0f881e3477d4f120c5164e61c751a66aa9c6a2d453988696520a5c2bde58684251ed42c701ee8fb3659e9579b3f40a7cea7efe3b3db403d204c85756fd3fa4e7ca9f2407224d732d638ac76a772c239b176e19b878480d9e4c38a28f3059967fd5cf489de4ef200ec03a66f95ecebd8510743eccb601f4ac0bb9b6e7a5cce4ceeb374a008307200a337513c28dcf274da6c5a1e279d7c945f68b6fc8a8aeeb58a83d4107f634c17a6f661f1b695f04076a8a2272e15067bca9716e8a194935164524fbff7b5f2726885a3b0891b351cd27e5d57fd8e21484473a041b06034ac0c0a8553dcae8556c44dc8438670e12941f641c50971c5caaaeb194bdf93179ab037a0535d948f68e0aefc0ae704fd2fabd1b38a3427661bf151c717dbcae8cb16ed0831aff0f02286c952cd9599ffeb3df9cfe5f2c394f150aae2df7cbcddd6a71efa6bff84a7f94afd77ba44fed1c64732eaa8b8de41c577139d10e59255cd2d9bfdcfcebedb80cb3f2bf65bdc4a40f5516eeb006f3ddd5e2f0732866173400cbb511e11e8f8d36cc6f9eeb5b2dc8efb1baec6087c72b5c828f308825e6edfd384bdc762352197fc8b7ba5bce6cca4617950777ac31cd7d8322d3fda3cbaf76f998ca6fdac8e34b5c5610fa225fb3e4a356f3d2d9eef9bcb4f67fd661b80544e6afea7dd753d1e3efc5684ce254bd4780ce437d734cb74164e25367eda8e7da8e4134e14aa647a17ee3d93bd8c37626e5f238f90c23baa33a72983d90cf197109104e6217024a2315c2f13c08bfa4060ec573aa88422bcd2902c1e782a96e767dca3fd271604306d5bba2bcc9a7823bd82a96d188dd4a93c429422d9deea71bfc916322608f14d16dbf9b98600f9ff6997c94208572840a07001e8dce2606f5fca7ddf09e96b73374787a371c70842e7fb9e05fa51251820f13c69c1b0005838ed5c20ebe0ae48ee749e9b7b44971f56b51f444be20f065a87b46eab564dca0056022ec56dc308db7ea2c22bc6140bffb38557071cf64eef5133db6c7171e9f1bfd6786d9f9f92d21c8b8fd9598f5ac0a9892645590a9c87f5f9e00ebcdbd5584d1c649a234c716a773fdccc6f1a04264a0c42631a252e122dd6df2751de9bb5be1e1a458235a330d757b29e0e29c4166de9027443b96815d29ddf73f438074be64033e82edae7099ad3b28f5954d7dda9a2ac6fede1ae1c87a69abfe435285b5dd50701a7f6b557384d7b27d60d954372534b598c24e29fdef3d5836ecb0fed72c97832f87aaf09f33e9682dbcd9e692eaf70a39edabb1e1a27035f4e9db060e2679d8aa24a6f1697ab80679377478b239614ff2ca5255b8b85842ed011c4bb5384ee032663da45857e104af597431b6f41039e024a2238e3b128249e0621c651d1973f00f06315e940e98d48006d05a085dff4df5568bac6240ded483863df7d70eb5c66f00727029bb6c7da603d4ea8c59728b7fb24a397b71a188667899eb2f109eef24fdbf4733d7905228f28d124fc4bb9341e00f297d4bece1f63772f1515c678b162f7656b566c05bfc9b113301d1768b3a2f0362fd1528d1ed7fcbcf1f7b756d368f89d591a6426f746a4887eed65c93c52295c81bc2687196e1e27485875bb7e2f553fcff1b3607eaf2cfb44ac71fc55b54c3f3611b6c119c2357a0d2cd786a8ce4716d845f49dd7715a320a4f7f2b5f4b87b2aaba855f52053610a155bc1df07abc0155440b8427d07b5c84958d462c66034b466e5af2ab65f60e994f4aec0976826ac08622ef2de1ee1d6456cce9651910545152019a8ea0385a61c071bfa22843dd59629f5185688f18fec2bbce6b6c4b8edc71460c14a4619351d78a04ecc0d7a3455ae2e02d92663d2409f826e5413f2c284fa9ea770c81e7a89d69eb59c6f11c7e26ae175d7a2320b83b5a20824de9ed5f4c6428e19421fe3094b83bb5250d68750b9dc1a722fd47c9335bd27c027a26733942b50493fc62a69932e8fedf8201b4345b34b0dd848c104bccb874e74428dcae65a89985fa123c78959fd73dbfe713e9a11015f1a0de1db99bc56757eacebd7204d8d300cdb8071150262114a3c0ff26e15b6de849a864edaf4941d31a9bf42ac87a4f36bded25fcc886c0db70f789ddf136bf4acf25be09f3e8c7c5949c91c3e5708cdd41d18402e16e34d52fa800d2ba9511d62c5bf176c09e64c883ce62dd9070634923e29cedc6e13145b2d10decbc3ca358c0d0d455758d4f0ef8ba546e7f81e74f58b70fbb49f8164856286c12ddf1eae412216d87914941c181b8418c14f750c059a190a497c1118975ec8815133f891ee3cac4c7bd6f37dac9a41f9024242931c1b039d2224d2157f6ee63ec3e65442d64205ef2526706ffd219d672027a98280d9aa2d7c37e1a6c4db07f49b425724a992a3053e04942c873efb96676bfe712ad92d5d4106f2d60f444e92199fc1f77884ba56cdb8c784b70247c25adfac98b0f9201d9a82d789712e98ca88b47297c32019a96f91e3b0d1ba608409e0af9f4c4dc5195909bb70fdc6de28661bde2e70f4c20032e40babb88da6285310c9a48e7ceb0ad94b01821cad8136d62b741dea6a7782933f2483590f84067de67a29a66591f1f427f03d178b840765dac62d66cbd0edba4af11269da87b6eac6b92233e73e1df463471849edb1ae1dd995fdfd858634c72032e5c18515dce2228e4eab235a14ecba9300e7d0fff027051b68f6ee5ba31f8078e60831f3d0dd7b571c5150cbec8deac2ef71c5140848a5ff5bb49c5d6fcf746cc045aacfde47296b99349c9bfe88f956e4f31e9fa56271ee2e55a76c630a68c71a786687d2bd79e8f1bda2fe4d754da6cfb4d2458d75a5ed84e171fddce921d15bdc0ef98f25124cc248e6e792f36d15bfbf52f90aa50b4fb9ad2e296ec5bf7f3a2dd99e0e75e34bdafa0175e712a50545e7b870044e19ef5e4f04bbb60f6d58333bcbe03dce7b2eefecccba440b0f4ceb82c1ad5319e9eb171bf256312080944986d0a7c26e7ea8aa3a7f0c004000280100002800900020073797a30000000003c0002800900020073797a300000000008000180fffffffd0900020073797a31000000000900020073797a31000000000900020073797a32000000000c00044000000000000000eb94010180e900010089f0311affc29983e783944f111f6dafaf5ddd547bdb204e5dda696ebe08d041f1e2c21023fbb49d5d0d907c58c66f38f351791f7b5050a3969349e87ec8e36895ea54bb901bcbf43c3921373e5bd93f1423975b52f287e5e9b9f7a14cad8a626d3f384c17c36e664fbec25a78789acfebae95076938c6a92ca8b6a75c8858e7e7c6bb79e37dac45fb458339fda39cc482f7adae3fab2a0476f225648e6e6c961c49678e23112e200066629e5eec02ea5f355a743b9792764e10bbf3aebf1820054f90dde3cad29af0c7f4ef3004930d1b3124ac429e06298c2fdd7e5296ccc7ce666e1a63000000100002800900020073797a31000000001400028008000180fffffffb08000180ffffffff4000028008000180ffffffff08000180ffffffff08000180fffffffd08000180fffffffb0900020073797a310000000008000180fffffffe08000180fffffffb1c0002800900020073797a32000000000900020073797a3000000000240002800900020073797a31000000000900020073797a300000000008000180fffffffe04000780d8000280640002800900020073797a30000000000900020073797a30000000000900020073797a31000000000900020073797a320000000008000180fffffffd0900020073797a3200000000080001800000000008000180000000000900020073797a31000000004c0002800900020073797a30000000000900020073797a30000000000900020073797a30000000000900020073797a32000000000900020073797a30000000000900020073797a3100000000220001003f84630e951b75054a3783f6744890d354d6c98986d14356cc5192ec55d000000900090073797a30000000005c0100800c00054000000000000000010c000440000000000000000888000280040002803d000100629bc8506407e26adf868178f70c437592fcd15f7d6eedea5381bacc940ed269bcabbaada2ed5d163776deb19dc0c572d7421142283d2855f00000001800028008000180fffffffc0900020073797a310000000027000100fdda960bab152e74f7b85aa4c7d27b47a6976fb4c5bf8b0017601fbb1d3105800e76ef00ac000180a80001002082aee366d5bf96165c34edaab20c803722fb94fde3fb1bf60d650c06996cbe02537c2156857b51d50f110988d3a5aef749e4efe05e0e108c599e438949bd765f1a6dbfe575b7358736c1db49e50642c9b4b1753bfae99aac1e42c16ce6d2ee5f6767fa729253b86ed93b70d48d3b4e23dbc34eaa6d31c8549c6ef0fc7ca9cb3c13fb9750799cf27d76a8b0469935b0b37c01a1f1dd93e561bd765249465d7a5ed8251c0900090073797a31000000000900010073797a310000000060010000160a0103000000000000000007000002180103804000038014000100677265300000000000000000000000001400010076657468305f746f5f626174616476001400010067656e65766530000000000000000000cc000380140001006e657464657673696d3000000000000014000100766c616e300000000000000000000000140001006361696630000000000000000000000014000100687372300000000000000000000000001400010076657468305f746f5f7465616d0000001400010067656e657665310000000000000000001400010069703665727370616e300000000000001400010067656e6576653000000000000000000014000100626f6e645f736c6176655f30000000001400010067726530000000000000000000000000080002400001000108000740000000000c00054000000000000000010900010073797a31000000000c000540000000000000000308000740000000002c0000000c0a03000000000000000000010000070900010073797a31000000000900020073797a3000000000140000001100010000000000000000000000000a"], 0x3f04}, 0x1, 0x0, 0x0, 0x4008010}, 0x40041) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="13030000000000000000070000000c0002800500020000000000"], 0x20}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents(r5, &(0x7f0000001600)=""/62, 0x3e) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000300)={0x5, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x91ffffff00000000}}, 0x1c) [ 684.334772][T32564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.352346][ T29] audit: type=1800 audit(1594052845.747:761): pid=32526 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15971 res=0 16:27:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) 16:27:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:25 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xa655c72c8c000000}}, 0x1c) [ 684.514340][T32580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.538337][ T29] audit: type=1800 audit(1594052845.927:762): pid=32579 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15795 res=0 16:27:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xb804000000000000}}, 0x1c) 16:27:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r9, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000000040)={0x6, '\x00', {0xd1b}}) 16:27:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 684.656331][T32588] validate_nla: 2 callbacks suppressed [ 684.656338][T32588] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xc4ff000000000000}}, 0x1c) [ 684.729713][T32588] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 684.808268][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:27:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xc4ffffff00000000}}, 0x1c) 16:27:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x101, 0x6, 0xe7, 0x1, 0x3, "56d2dbba025d9295"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) fsetxattr$security_ima(r6, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "c01e3d203c204320b150d75c0bc9d6baee33f600"}, 0x15, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16:27:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe02e000000000000}}, 0x1c) 16:27:26 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130300000000bb16e618070000ca000c00028005000200000000"], 0x20}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 685.021644][T32616] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:27:26 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) [ 685.079955][T32622] __nla_validate_parse: 2 callbacks suppressed [ 685.079963][T32622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 685.110401][T32625] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 685.132646][T32622] ================================================================== [ 685.141472][T32622] BUG: KASAN: use-after-free in tipc_nl_publ_dump+0xd21/0xdd0 [ 685.148929][T32622] Read of size 2 at addr ffff8880a7d14c14 by task syz-executor.3/32622 [ 685.157154][T32622] [ 685.159482][T32622] CPU: 0 PID: 32622 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 685.168142][T32622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.178190][T32622] Call Trace: [ 685.181500][T32622] dump_stack+0x1f0/0x31e [ 685.185848][T32622] print_address_description+0x66/0x5a0 [ 685.191401][T32622] ? vprintk_emit+0x342/0x3c0 [ 685.196085][T32622] ? printk+0x62/0x83 [ 685.200077][T32622] ? vprintk_emit+0x339/0x3c0 [ 685.204750][T32622] kasan_report+0x132/0x1d0 [ 685.209251][T32622] ? tipc_nl_publ_dump+0xd21/0xdd0 [ 685.214366][T32622] tipc_nl_publ_dump+0xd21/0xdd0 [ 685.219375][T32622] ? genl_lock_dumpit+0x64/0xa0 [ 685.224233][T32622] genl_lock_dumpit+0x86/0xa0 [ 685.228954][T32622] netlink_dump+0x4be/0x10d0 [ 685.233549][T32622] ? __netlink_dump_start+0x530/0x700 [ 685.238936][T32622] __netlink_dump_start+0x538/0x700 [ 685.244139][T32622] genl_rcv_msg+0xb03/0xe00 [ 685.248645][T32622] ? genl_rcv_msg+0xe00/0xe00 [ 685.253313][T32622] ? genl_start+0x570/0x570 [ 685.257816][T32622] ? genl_lock_dumpit+0xa0/0xa0 [ 685.262667][T32622] netlink_rcv_skb+0x190/0x3a0 [ 685.267422][T32622] ? genl_unbind+0x270/0x270 [ 685.272012][T32622] genl_rcv+0x24/0x40 [ 685.275998][T32622] netlink_unicast+0x786/0x940 [ 685.280769][T32622] netlink_sendmsg+0xa57/0xd70 [ 685.285537][T32622] ? netlink_getsockopt+0x9e0/0x9e0 [ 685.290740][T32622] ____sys_sendmsg+0x519/0x800 [ 685.295591][T32622] ? import_iovec+0x12a/0x2c0 [ 685.300278][T32622] __sys_sendmsg+0x2b1/0x360 [ 685.304892][T32622] ? __might_fault+0xf5/0x150 [ 685.309576][T32622] ? _copy_to_user+0x100/0x140 [ 685.314357][T32622] ? lock_is_held_type+0x87/0xe0 [ 685.319301][T32622] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.325363][T32622] do_syscall_64+0x73/0xe0 [ 685.329782][T32622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.335670][T32622] RIP: 0033:0x45cb29 [ 685.339553][T32622] Code: Bad RIP value. [ 685.343618][T32622] RSP: 002b:00007f9f89797c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.352026][T32622] RAX: ffffffffffffffda RBX: 0000000000502260 RCX: 000000000045cb29 [ 685.359993][T32622] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 685.367964][T32622] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 685.375933][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 685.383903][T32622] R13: 0000000000000a2f R14: 00000000004cd152 R15: 00007f9f897986d4 [ 685.391883][T32622] [ 685.394206][T32622] Allocated by task 32625: [ 685.398623][T32622] __kasan_kmalloc+0x103/0x140 [ 685.403381][T32622] __alloc_skb+0xde/0x4f0 [ 685.407701][T32622] netlink_sendmsg+0x7b2/0xd70 [ 685.412454][T32622] ____sys_sendmsg+0x519/0x800 [ 685.417211][T32622] __sys_sendmsg+0x2b1/0x360 [ 685.421796][T32622] do_syscall_64+0x73/0xe0 [ 685.426300][T32622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.432177][T32622] [ 685.434499][T32622] Freed by task 32625: [ 685.438565][T32622] __kasan_slab_free+0x114/0x170 [ 685.443493][T32622] kfree+0x10a/0x220 [ 685.447372][T32622] __kfree_skb+0x56/0x1c0 [ 685.451688][T32622] netlink_unicast+0x78e/0x940 [ 685.456443][T32622] netlink_sendmsg+0xa57/0xd70 [ 685.461202][T32622] ____sys_sendmsg+0x519/0x800 [ 685.465961][T32622] __sys_sendmsg+0x2b1/0x360 [ 685.470545][T32622] do_syscall_64+0x73/0xe0 [ 685.474957][T32622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.480835][T32622] [ 685.483158][T32622] The buggy address belongs to the object at ffff8880a7d14c00 [ 685.483158][T32622] which belongs to the cache kmalloc-512 of size 512 [ 685.497212][T32622] The buggy address is located 20 bytes inside of [ 685.497212][T32622] 512-byte region [ffff8880a7d14c00, ffff8880a7d14e00) [ 685.510385][T32622] The buggy address belongs to the page: [ 685.516022][T32622] page:ffffea00029f4500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 685.525127][T32622] flags: 0xfffe0000000200(slab) [ 685.529975][T32622] raw: 00fffe0000000200 ffffea00027a5e08 ffffea00024689c8 ffff8880aa400a80 [ 685.538557][T32622] raw: 0000000000000000 ffff8880a7d14000 0000000100000004 0000000000000000 [ 685.547129][T32622] page dumped because: kasan: bad access detected [ 685.553530][T32622] [ 685.555855][T32622] Memory state around the buggy address: [ 685.561478][T32622] ffff8880a7d14b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 685.569532][T32622] ffff8880a7d14b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 685.577594][T32622] >ffff8880a7d14c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.585646][T32622] ^ [ 685.590231][T32622] ffff8880a7d14c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.598285][T32622] ffff8880a7d14d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.606336][T32622] ================================================================== [ 685.614386][T32622] Disabling lock debugging due to kernel taint [ 685.638624][T32622] Kernel panic - not syncing: panic_on_warn set ... [ 685.645237][T32622] CPU: 0 PID: 32622 Comm: syz-executor.3 Tainted: G B 5.8.0-rc3-syzkaller #0 [ 685.655286][T32622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.665330][T32622] Call Trace: [ 685.668618][T32622] dump_stack+0x1f0/0x31e [ 685.672944][T32622] panic+0x264/0x7a0 [ 685.676893][T32622] ? trace_hardirqs_on+0x30/0x80 [ 685.681827][T32622] kasan_report+0x1c9/0x1d0 [ 685.686325][T32622] ? tipc_nl_publ_dump+0xd21/0xdd0 [ 685.691430][T32622] tipc_nl_publ_dump+0xd21/0xdd0 [ 685.696367][T32622] ? genl_lock_dumpit+0x64/0xa0 [ 685.701211][T32622] genl_lock_dumpit+0x86/0xa0 [ 685.705882][T32622] netlink_dump+0x4be/0x10d0 [ 685.710465][T32622] ? __netlink_dump_start+0x530/0x700 [ 685.716182][T32622] __netlink_dump_start+0x538/0x700 [ 685.721372][T32622] genl_rcv_msg+0xb03/0xe00 [ 685.725868][T32622] ? genl_rcv_msg+0xe00/0xe00 [ 685.730532][T32622] ? genl_start+0x570/0x570 [ 685.735025][T32622] ? genl_lock_dumpit+0xa0/0xa0 [ 685.739871][T32622] netlink_rcv_skb+0x190/0x3a0 [ 685.744627][T32622] ? genl_unbind+0x270/0x270 [ 685.749210][T32622] genl_rcv+0x24/0x40 [ 685.753184][T32622] netlink_unicast+0x786/0x940 [ 685.757939][T32622] netlink_sendmsg+0xa57/0xd70 [ 685.762700][T32622] ? netlink_getsockopt+0x9e0/0x9e0 [ 685.767908][T32622] ____sys_sendmsg+0x519/0x800 [ 685.772668][T32622] ? import_iovec+0x12a/0x2c0 [ 685.777339][T32622] __sys_sendmsg+0x2b1/0x360 [ 685.781926][T32622] ? __might_fault+0xf5/0x150 16:27:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r3, 0x313, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') 16:27:27 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xe803000000000000}}, 0x1c) [ 685.786601][T32622] ? _copy_to_user+0x100/0x140 [ 685.791369][T32622] ? lock_is_held_type+0x87/0xe0 [ 685.796314][T32622] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.802461][T32622] do_syscall_64+0x73/0xe0 [ 685.806875][T32622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 685.812756][T32622] RIP: 0033:0x45cb29 [ 685.816635][T32622] Code: Bad RIP value. [ 685.820693][T32622] RSP: 002b:00007f9f89797c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.829095][T32622] RAX: ffffffffffffffda RBX: 0000000000502260 RCX: 000000000045cb29 [ 685.837064][T32622] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 685.845027][T32622] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 685.852985][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 685.860951][T32622] R13: 0000000000000a2f R14: 00000000004cd152 R15: 00007f9f897986d4 [ 685.870194][T32622] Kernel Offset: disabled [ 685.874509][T32622] Rebooting in 86400 seconds..