40)={0x7, 0x79, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x80000000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={r4, 0x9b, "9c83365617675f9e3f672ca22e0f7c9fef86a240507eaf687359424da324c62d74d52bcb4afb4a1188743377a26561528bfa87401ed80e17e98820d60462fb318a828f008b3eed9a203b8d03c6e93d445b28f541f7ac5d96c3d52775100324406d6387a0b17766cd5a297c3e8bf5c4ddab23152197564fbb1b4aa3a78e5b827a8b101234a998c9389972075724f3c318e67e173367b67862dc9df5"}, &(0x7f0000000280)=0xa3) pselect6(0x404, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={0x0}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 420.240151][T22555] input: syz0 as /devices/virtual/input/input1188 05:15:50 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b005900020423ca0200cf", 0x1f) [ 420.349497][T22566] input: syz0 as /devices/virtual/input/input1189 05:15:50 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 420.416658][T22574] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 420.522227][T22574] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sco\x00') ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x0, 0x3ff, 0xea, 0xa}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb) 05:15:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x19000080, 0x0, 0x0) 05:15:50 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:50 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000059020423ca0200cf", 0x1f) 05:15:50 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={0x0, 0x0, 0x0}, 0x0) r0 = getpid() ptrace$getregs(0xc, r0, 0xff, &(0x7f0000000000)=""/4096) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 420.923086][T22598] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 420.951389][T22599] input: syz0 as /devices/virtual/input/input1190 05:15:50 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 420.989667][T22598] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 421.025278][T22599] input: syz0 as /devices/virtual/input/input1191 05:15:51 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000402020423ca0200cf", 0x1f) 05:15:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="232107d48b59dc8aaf26b8afb4ce84681a6d42f21ac6ff56a0bf852dd8e6cbf258e22952479d1834630fae458d25090a"], 0x30) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x114, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbd32}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6e9b}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfc6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x20008010}, 0x40001) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:15:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xf) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 421.321123][T22631] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 421.391419][T22631] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:51 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000403020423ca0200cf", 0x1f) 05:15:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x4000400) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000028c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000100)="4d18d83388f7e2da149a0f3317b62de064ac0595746eccfe78e2f6bcd9343d18"}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) 05:15:51 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1a000080, 0x0, 0x0) [ 421.719982][T22653] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 421.737799][T22654] validate_nla: 7 callbacks suppressed [ 421.737809][T22654] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 421.795091][T22657] input: syz0 as /devices/virtual/input/input1192 05:15:51 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:51 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000404020423ca0200cf", 0x1f) 05:15:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x4000400) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000028c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000100)="4d18d83388f7e2da149a0f3317b62de064ac0595746eccfe78e2f6bcd9343d18"}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) [ 421.860402][T22649] input: syz0 as /devices/virtual/input/input1193 05:15:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 421.994561][T22674] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 422.024801][T22670] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1d000080, 0x0, 0x0) [ 422.079240][T22674] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:52 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x901, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2, 0x1c, 0x7}) write$P9_RSTAT(r0, &(0x7f0000000100)={0x69, 0x7d, 0x0, {0x0, 0x62, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xc, 'GPLem1&ppp1:', 0x11, '/dev/vhost-vsock\x00', 0x11, '/dev/vhost-vsock\x00', 0x1, '\xea'}}, 0x69) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 422.166336][T22689] input: syz0 as /devices/virtual/input/input1194 05:15:54 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:15:54 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:54 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000405020423ca0200cf", 0x1f) 05:15:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)=""/33, &(0x7f0000000040)=0x21) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)) 05:15:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x548f) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x13) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x20000000, 0x0, 0x0) 05:15:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4080) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) dup(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000200), 0x0) [ 424.719325][T22738] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:54 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000406020423ca0200cf", 0x1f) 05:15:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000ffd, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="f298e735c6a0ad3f5a17333a079476ee1b6fce5cac77c073004308f510cf2b5775753240221b53da7aa7e7af78cd2bfeaa96b47daf30c971c2c72cbf7e17f25236f0c6c7a5c2c0ffc561f5a95850138662d7b3720b791f0ea82e03cb09cef9586bc1c462c95b5eec0dd281a3ed95cb6328458936e76172634b1db9d64dc7913163b5e61f353c1b48afc5419138ee0fa2178851adfd84afb7be45522d985890e8e4d016d7579e2ba2ce0262a73b0849ff0110ef27d550598a2d69a7626f4a044ecd5b143a04ae2f5c"}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101200, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x3ff, 0xfffffffffffffff8}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 05:15:54 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 424.875817][T22748] input: syz0 as /devices/virtual/input/input1197 05:15:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x3f000000, 0x0, 0x0) [ 424.920308][T22762] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r1 = getpgrp(r0) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) kcmp(r1, r2, 0x7, r3, r4) r5 = syz_open_dev$usb(0x0, 0x0, 0x105002) r6 = msgget(0x2, 0x40) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) msgrcv(r6, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x3000) set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x44000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000240)=0xffffffffffff4bec, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) fallocate(r7, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xc00000000000000, 0x8, 0x1, 0x0, r7, 0x0, 0x0, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) 05:15:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85, 0x10}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) 05:15:54 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000407020423ca0200cf", 0x1f) 05:15:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) eventfd(0x800) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:55 executing program 4: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000400202) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x80040) 05:15:55 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000408020423ca0200cf", 0x1f) [ 425.187803][T22792] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 425.247978][T22794] input: syz0 as /devices/virtual/input/input1198 05:15:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x40000000, 0x0, 0x0) [ 425.290143][T22804] __nla_parse: 6 callbacks suppressed [ 425.290152][T22804] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 425.354654][T22794] input: syz0 as /devices/virtual/input/input1199 05:15:55 executing program 4: syz_mount_image$vfat(&(0x7f00000010c0)='vfat\x00', &(0x7f0000001100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r1, 0x202, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4a9}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="4f1c32eb302ff2ed84a64d3b6a0e713e"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="af1f7a279de8d06857d8e2d4121a763e"}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) [ 425.437312][T22804] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 425.475667][T22819] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r4 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x1f, 0x7ff, r3, 0x0, r4, 0x0, 0xa19c, 0x3074}) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000), 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 425.721188][T22842] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:55 executing program 1: socketpair$unix(0x1, 0x2200000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x500) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0xff, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x1, 'lc\x00', 0x10, 0x8, 0x3d}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)) 05:15:55 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101001, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x6, 0x0, {0x0, 0x0, 0x40000}}, 0x30) 05:15:55 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00040a020423ca0200cf", 0x1f) 05:15:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x40000001, 0x0, 0x0) 05:15:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, 0x1e) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000), 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 426.060498][T22856] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 426.070080][T22858] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'ifb0\x00', 0x3}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) close(r0) [ 426.111030][T22862] input: syz0 as /devices/virtual/input/input1202 [ 426.138419][T22858] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:56 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000001c0)={{0x8}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) fcntl$setstatus(r0, 0x4, 0x800) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) [ 426.197817][T22867] input: syz0 as /devices/virtual/input/input1203 05:15:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000), 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00040e020423ca0200cf", 0x1f) 05:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x50000000, 0x0, 0x0) 05:15:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@default, @netrom, @netrom, @null, @default, @rose, @null]}, &(0x7f0000000240)=0x48) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_tcp_int(r3, 0x6, 0x3f, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, &(0x7f00000001c0)=0x8) ioctl$TIOCEXCL(r2, 0x540c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r4, 0x4, 0x81, 0x3, 0x3f, 0x1}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000000)=0x1004, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 426.426043][T22886] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x48800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x7, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) prctl$PR_SVE_SET_VL(0x32, 0x369a6) [ 426.479102][T22893] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 426.517684][T22901] input: syz0 as /devices/virtual/input/input1204 [ 426.578079][T22893] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:56 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x20000000000000c1, 0x0, &(0x7f0000000080)='\xe3\x10syzk\xd0\x81le', 0x0, 0x38b}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f2, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) r2 = dup(r0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x1, 0x4, 0x8, 0x1, 0x12, 0x80, 0x100000000, 0x19327356, 0x2, 0xfb5b, 0x200, 0x1000000000000000}) [ 426.722315][T22925] input: syz0 as /devices/virtual/input/input1205 05:15:56 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x200000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2003000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x104, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1f}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3963}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="7a6e30d0a3ea4637d67a817bb9459657"}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xce7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x110}, 0x1, 0x0, 0x0, 0x8014}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x10, 0xfeffffffffffffff, 0x5) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002400075e1dfffd946fa2830020200a00090000000000850777ba55ff7f49be7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 05:15:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00040f020423ca0200cf", 0x1f) [ 426.805604][T22928] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x80000007, 0x0, 0x0) 05:15:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4c000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000000140)="d1020400005800200007000613f32e0400ce5f7fe0c8a3245e30b37eb37e6cfae340aba4b471985e", 0x28) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb22, 0x220200) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 426.945837][T22946] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x53, 0x10000, 0x1ff, {0x41, 0x1, 0x7}, 0x2000000, 0x1, 0x20, 0x3, 0x0, '', 0x9, '\'&selinux', 0xe, 'cpusetbdevself', 0x9, '/dev/kvm\x00'}, 0x9, '/dev/kvm\x00', r3, r4, r5}}, 0x71) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0x3a, 0x0, 0x47f], [0xc2]}) 05:15:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000410020423ca0200cf", 0x1f) 05:15:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x2, 0x73) bind(r2, &(0x7f0000000140)=@l2={0x1f, 0xffffffffffffff7f, {0x80000000, 0x80000000, 0x7ff, 0x7f, 0x800, 0x1}, 0x7, 0xfa}, 0xcb) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="699d19f2493d0ab5b16f28db7436dec35536a0b9d31362dc83acdb4b26e2f0b40c029aea389eb09b8852ae0d45dc5a1987adec323a204469", 0x38}], 0x2000002, &(0x7f0000000240)=ANY=[@ANYBLOB="7573726a71652c61707072616f73655f057970fd3d6969617369672c00000000"]) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) faccessat(r3, &(0x7f0000000100)='./file0\x00', 0x40, 0x1100) [ 427.139912][T22963] kvm [22957]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 05:15:57 executing program 1: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x400) pread64(r0, 0x0, 0x0, 0x0) [ 427.194820][T22967] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 427.245295][T22971] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 427.305129][T22985] kvm [22957]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 05:15:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000", 0x10) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200000, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x48, 0x0}}, {{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x1a0ffffffff}}, 0x80, 0x0}}], 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) [ 427.374645][T22982] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "usrjqe" [ 427.414119][T22993] input: syz0 as /devices/virtual/input/input1208 [ 427.464716][T22999] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000448020423ca0200cf", 0x1f) 05:15:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x80000008, 0x0, 0x0) 05:15:57 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0xc0044308, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_open_dev$mouse(0xfffffffffffffffe, 0x20000ffff, 0x101004) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='bbr\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = msgget(0x3, 0xdd8f4a4cb3aabe1a) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000440)=""/4096) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = request_key(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffffd) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() keyctl$chown(0x4, r5, r6, r7) ioctl$KVM_NMI(r2, 0xae9a) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r3, 0x7) r9 = fcntl$dupfd(r8, 0x0, r2) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xffffffff, 0x3}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000100)={r12, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r10, &(0x7f0000000100), 0x10232) close(r11) 05:15:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x80002, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000380)='batadv0\x00'}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @multicast2}, 0x82, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100)='veth1_to_bridge\x00', 0xfff, 0xd6, 0x401}) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea082bb504cf374d", 0x8}], 0x1, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000280)=""/246) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) fcntl$setstatus(r3, 0x4, 0x6000) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) ioctl$EVIOCGREP(r3, 0x4010744d, &(0x7f0000001000)=""/174) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@ethernet={0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)="646f7d556f7014325b0a128f1f37de414212c88346f837343d77ecc0aa652061ae0fc6aa64b504885a079730845ae2c5794f1be853b2f90f13ce4cc9cb84cb9455b337c1d72f522820ff009e1828d61e9d1acb45ba115a7028938261fea1d8b645046009f7975eb69fbced9c3335f7a96d3017c680bc86046f2739bbecf197f12cd5ddcc32aee6fdfb2746df6c66a8524258d9a66c945df1f758d0c04c972bb3aa8b7aa50398dc7b5da56083854a220bd737a7867c10efbf52c4accbe08b94231d5ba1cdafdc6e", 0xc7}], 0x1}, 0x40000) prctl$PR_SET_FPEMU(0xa, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x40810}, 0x8000) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x201c2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x200}, 'port0\x00', 0x6e, 0x8, 0x7, 0x100, 0x5, 0x5, 0x5143, 0x0, 0x2, 0x3}) [ 427.614891][T22993] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "usrjqe" [ 427.626662][T22982] input: syz0 as /devices/virtual/input/input1209 [ 427.637999][T23014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:15:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 427.735955][T23014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 427.805507][T23029] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00044c020423ca0200cf", 0x1f) 05:15:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000280)=""/101, &(0x7f0000000100)=0x65) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000180)={{0xffffffffffffffff, 0x1, 0x80000000, 0x3, 0xfffffffffffffffa}, 0x2, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0xde4, 0x6, 0x7ff, 0x10000}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) mlockall(0x1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 05:15:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x62, [], 0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/98}, &(0x7f0000000280)=0x78) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 427.928227][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 427.934197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 428.104356][T23053] input: syz0 as /devices/virtual/input/input1210 05:15:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000460020423ca0200cf", 0x1f) [ 428.217340][T23062] input: syz0 as /devices/virtual/input/input1211 [ 428.233319][T23059] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x80000019, 0x0, 0x0) [ 428.328236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.334108][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:15:58 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 428.408241][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.414106][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:15:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_tcp_buf(r0, 0x6, 0xf, &(0x7f0000000340)=""/216, &(0x7f0000000440)=0xd8) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000100)="beea7c00aa553ae9ae86e30d0b18c8ff35d9817637935427a5a5cb44dde0dd26fb0b16f021dec73eee38a19eb3aeb43e97bfe0e654a6050a6ff0677b5c91d425cd206aaa3cf562255a67ac6ec579680579e2d92c0043c65f10105b93204c10426aa732012e89df354207e467a03c816c63baa88f24756cccb950090fd6fd93e8a7b7ec2608b93f2e3a43e366bd6cb99d4146a4a1b6670fd6c2a35679dd30ba448b8b9d3db3a9fdf9666e2bbb2a404c322ba99b898aa78338841b8471b1bd17ea5b90f3d67f7df5d6815a804d9188317b35852ddd54b2e58f52c6c42c416ab31f4212d3f618c65928", 0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/bnep\x00') socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r4 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x60) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 05:15:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000468020423ca0200cf", 0x1f) 05:15:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x40000000015, 0x40000000000005, 0x0) getsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00003e9ffc), &(0x7f0000000180)=0x4) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioprio_get$uid(0x3, r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x1, 0x2) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x10000, 0x400) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0xfffffffffffffffe, {0x7f, 0x4, 0x7, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) r5 = open$dir(&(0x7f0000000280)='./file0\x00', 0x2, 0x1) r6 = openat(r5, &(0x7f0000000240)='./file0\x00', 0x3, 0x4b) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$uinput_user_dev(r3, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) ioctl$UI_DEV_CREATE(r3, 0x5501) [ 428.568207][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.574063][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.614326][T23084] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 428.687443][T23092] input: syz0 as /devices/virtual/input/input1212 05:15:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00046c020423ca0200cf", 0x1f) 05:15:58 executing program 1: rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000400)=""/9, &(0x7f0000000440)=0x9) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x52) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x48, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28, 0x28, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x3, 0x13}], &(0x7f00000001c0)=[0x68, 0x18, 0x40, 0x0, 0x28]}}, @enter_looper], 0xf7, 0x0, &(0x7f0000000280)="17c05d491d5b525659286d947f5f8202ed9d009adb11f19b75da53551ef63c1fc6760819cbf780ebb4c9f9c0a4b110ddae7cde5e76e679ab5f1ca147ed8ca33516aa15ed07f056b9819ea294635d45c4fb87ce7af63d54f5c3b8aa00c85b1e2d5b520fc748dc9c5fd943a969f7fa09dc96072daf0e247275df0a079b701bdb555d6737c83250c59f707dfced82c8735dccf5b3712973f00404af87f355c6a045b178625c186aa7d95a8819972fc648771c09130836c139b981b720f1177ba59aef2e00d3be87f4abba8dde2cf60b6f5e4a008771964ebcb5780b8c88c6a051fb231f7e2c07e3498d14384180bb9172022df0558750ef19"}) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x501101) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000040)=0x41) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x100000000}, 0x8) accept4$tipc(r1, &(0x7f0000000480), &(0x7f00000005c0)=0x10, 0x80000) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) stat(&(0x7f0000000100)='./file2\x00', &(0x7f0000000540)) 05:15:58 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x8000001a, 0x0, 0x0) [ 428.877831][T23103] input: syz0 as /devices/virtual/input/input1213 [ 428.968209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.969137][T23119] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 428.974115][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:15:59 executing program 4: mknod$loop(0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) recvmsg(r3, &(0x7f0000000640)={&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/57, 0x39}], 0x2, &(0x7f0000000540)=""/215, 0xd7}, 0x100) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r4, &(0x7f00000000c0)=0x202, 0xdd) 05:15:59 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000474020423ca0200cf", 0x1f) 05:15:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="55600300020000000000300875cdb75c3860ffd752f5ac553c5276400a87207c18cbe750b3556b"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x80000, &(0x7f0000000100)='syz0\x00') ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:15:59 executing program 1: r0 = open(&(0x7f0000000600)='./file2\x00', 0x0, 0x21) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0xfffffffffffffff7, 0x2}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="010ada6d8c52deaaa8723725281c44d960865f46605ad13f10ea15842f1dbc728e166f553c39ea74021f91ff46342c8f1c6914a827e2de06770bc536af45addffdb36a5e7519c049c1cfb7feeb9b825c9a34862c3f0f37e8b543bfad8948829fcf7aa533db48ecb6dc7e96ea9547f6df83f1f9c3f662dc720450954a9596169a3cac1f7516243d1bef7135fc8b6f565f927abd23d5b0311282b8464556c3e92276c090c93c43293841fa8aef8bda0000000000032f2cac1317ae164a0ad25dbcdb3cee69d1054eb801dc19b3cb49f86fd071ec77e5241683dd1018e4fd812c4bfc02c9a99964af2e2c4e8a", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) ioctl$TCSBRK(r1, 0x5409, 0x6) io_setup(0x8, &(0x7f0000000140)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='./file1\x00', 0x7, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="7b82ee18b1dc05eaa483acd7ed2b5522811ecd6d717f6761b5d45c76f0bf5a39efd08bbd72", 0x25, 0x578}, {&(0x7f0000000340)="32b6cb3043d8053718db062ef97b99e7d9fbfcc2f1799083f4bb337a7f88d4df9ff4a61d9a84b0cfe0a3113ed6651a315996814a98a7e3b134ab8789fdb72c4c72a94e6632ca9835aa8b2c89e95ae05fe52b91f1f992a688a040d251350e1959a1ab35ec7bb0c303e8f2272d5f16aab25e268163e823df1d4b3fae21d7edc7b5c33728d285d16c502411d79872804dcc5bc69c40604d", 0x96, 0x5}, {&(0x7f0000000400)="3bc65b532f5d0deab822d80b9b6431ae99d71c5538a8d35a2abb559c127ec51354feed6cc4377f355418cc03850e408ac56201237d3377b695f06efb74f66f9079a950caf7985581e425231d1d218b0c2cbf16", 0x53, 0x1}], 0x901081, &(0x7f0000000500)={[{@overriderock='overriderockperm'}, {@sbsector={'sbsector', 0x3d, 0x8001}}, {@map_acorn='map=acorn'}, {@map_off='map=off'}, {@dmode={'dmode', 0x3d, 0x5}}], [{@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@smackfsroot={'smackfsroot'}}, {@seclabel='seclabel'}]}) 05:15:59 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:15:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x8000001d, 0x0, 0x0) [ 429.939725][T23157] input: syz0 as /devices/virtual/input/input1214 [ 429.951359][T23159] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 429.990761][T23157] input: syz0 as /devices/virtual/input/input1215 05:15:59 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:00 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b00047a020423ca0200cf", 0x1f) 05:16:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000025d1a5de1f4d57cb942000000000000095"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x224) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, 0x0) [ 430.146490][T23180] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:16:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xc0000000, 0x0, 0x0) 05:16:00 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 430.356929][T23204] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:16:00 executing program 4: mknod$loop(0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) recvmsg(r3, &(0x7f0000000640)={&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/57, 0x39}], 0x2, &(0x7f0000000540)=""/215, 0xd7}, 0x100) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r4, &(0x7f00000000c0)=0x202, 0xdd) 05:16:00 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400030423ca0200cf", 0x1f) 05:16:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) r2 = fcntl$dupfd(r0, 0x406, r1) accept4$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x800) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x5b8, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xffffffffffff8001, 0x7, 0xaf99, 0xf184}, {0x7e4, 0xf1e9, 0x7, 0x8}, {0x40, 0x78, 0x1f, 0x3}]}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa) 05:16:00 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_open_dev$sg(0x0, 0x0, 0x0) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) ioctl$TCSBRK(r0, 0x5409, 0x4) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@int=0x9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r3, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) clock_gettime(0x0, 0x0) 05:16:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xc0000001, 0x0, 0x0) [ 430.923930][T23229] input: syz0 as /devices/virtual/input/input1218 [ 430.939767][T23233] __nla_parse: 13 callbacks suppressed [ 430.939776][T23233] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 431.011801][T23229] input: syz0 as /devices/virtual/input/input1219 05:16:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf", 0x1e) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r3 = dup2(r1, r0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x10001) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r7 = geteuid() syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0), 0x0, 0x3}], 0x4000, &(0x7f0000000500)={[{@journal_async_commit='journal_async_commit'}, {@minixdf='minixdf'}], [{@appraise='appraise'}, {@uid_lt={'uid<', r4}}, {@fowner_gt={'fowner>', r5}}, {@uid_gt={'uid>', r6}}, {@euid_eq={'euid', 0x3d, r7}}]}) 05:16:01 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400050423ca0200cf", 0x1f) 05:16:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xf6ffffff, 0x0, 0x0) [ 431.225907][T23260] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 431.276641][T23263] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 431.356605][T23273] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:01 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400090423ca0200cf", 0x1f) [ 431.511388][T23286] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 431.588647][T23286] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x818000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="c20000000000000000000000e3a5311a7205f9c72b8559435ddc2092303aa3f8fa6dd1a1919a98f796d6f3836a2b6928b34b44d66eaec94a4f16b858fd3fe175c8fce4073926577e3b67345cd796ea6d9c7cf00e7cea54057ba7808128d70bccb961bfe7a9657b26d3651243b99c5f", @ANYRES16=r3, @ANYBLOB="00032abd7000fedbdf25020000002000010008000b00736970000c0006006e6f6e650000000008000b0073697000080006007c4f0000"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfcfdffff, 0x0, 0x0) 05:16:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6e00007d02000000670000007f0000009d0300000002000000000000000000000920000000020000000800000000000000170040216c6f77154987f50f164fe2786e657431282d47504c0900090065762f6b766d0009002f6465762f6b766d000b007b2173656375726974792a00fe37c8da778182fa81ccbc4ff95f8b8caa1b08f43eea85f47204a81b0f3a3e7906bd50c3d986c6f29a8adbc3a5aca7cef3d5"], 0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x3, 0x1000100000}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000030000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000180)=[@dstype0={0x6, 0x3}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x4010000000000, 0x0, 0x2, 0x0, 0x10000}], 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0fe667bcf7494be3aae354d09c5a4a5867d57f6d4196d3ed9b62588e3a720086df71789bdc75ab1a7491fc04af1174addeba958e756cd25155cb6416d5fc68000000000000000000000000000000"]) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000003c0)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fstat(r1, &(0x7f0000000040)) 05:16:01 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b0004000a0423ca0200cf", 0x1f) 05:16:01 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000027c0)='/dev/midi#\x00', 0x1ff, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003380)=@nat={'nat\x00', 0x19, 0x2, 0xb18, [0x20002840, 0x0, 0x0, 0x20002870, 0x20003328], 0x0, &(0x7f0000002800), &(0x7f0000002840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x19, 0x8, 0xe917, 'nlmon0\x00', 'nlmon0\x00', 'yam0\x00', 'veth1_to_hsr\x00', @dev={[], 0x17}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x22}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x8a0, 0x8d8, 0x928, [@u32={'u32\x00', 0x7c0, {{[{[{0x4, 0x1}, {0x5, 0x3}, {0x401, 0x3}, {0x6}, {0x5, 0x3}, {0xddf1, 0x3}, {0x9, 0x3}, {0x7}, {0x2, 0x3}, {0x19, 0x1}, {0x100000000, 0x3}], [{0x1, 0x8}, {0x3, 0x2}, {0x400, 0xd3d2}, {}, {0x2ff, 0x80000001}, {0xf449, 0x3}, {0x7, 0xffffffff}, {0xc1a3, 0x7}, {0x81, 0xdf}, {0x8000, 0x1}, {0xe2, 0x1}], 0x1, 0x6}, {[{0x2, 0x3}, {0x10000, 0x3}, {0x1000, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x100000000}, {0x7, 0x3}, {0x8001, 0x3}, {0x0, 0x1}, {0x7, 0x2}], [{0xcff, 0x2}, {0x0, 0x9}, {0x1c5b, 0xc5f1}, {0x8, 0xfffffffffffffff7}, {0x89c, 0x3}, {0x9, 0xfd0}, {0x6, 0x652}, {0x3, 0x6}, {0x0, 0xa2}, {0x1, 0xfff}, {0x8001, 0x5}], 0xb, 0x7}, {[{0x2}, {0x8, 0x2}, {0x2, 0x1}, {0x100000001, 0x3}, {0x1, 0x2}, {0x9}, {0x2, 0x3}, {0x4}, {0x3, 0x2}, {0x40000000000000, 0x1}, {0x100, 0x1}], [{0x80000000, 0x4}, {0xfffffffffffffffd, 0x3}, {0x0, 0x100000001}, {0x7fffffff, 0x7}, {0x7ed, 0xfffffffffffffff9}, {0x3, 0x401}, {0x9, 0x7}, {0x7, 0xa7}, {0x10001, 0x4}, {0x1000, 0x3f}, {0x8, 0x5}], 0x4, 0x2}, {[{0xffffffff, 0x3}, {0x4, 0x2}, {0x8, 0x3}, {0xff, 0x1}, {0x3f, 0x1}, {0x6}, {0x1, 0x2}, {0x2, 0x3}, {0xb3, 0x3}, {0x300000000, 0x3}, {0x639f, 0x1}], [{0x7, 0xff}, {0x2, 0x6}, {0x500000}, {0x8001, 0x8}, {0xfffffffffffffffb, 0x6}, {0x3, 0x150a}, {0x5, 0x1}, {0xffffffff}, {0x3, 0x80000001}, {0x8, 0x4}, {0x81, 0xb5}], 0x5, 0x4}, {[{0x721, 0x2}, {0x10001}, {0x20, 0x3}, {0x9}, {0x1}, {0x6, 0x2}, {0x3f, 0x3}, {0x2, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x2}], [{0x9, 0x100000000}, {0x1ff, 0xb67f}, {0xa5, 0x3}, {0x7, 0x9}, {0x20, 0x5}, {0x8, 0xfffffffffffffffe}, {0x0, 0x8001}, {0x10000}, {0x5, 0x100}, {0x2, 0x8}, {0xffff, 0x2c6}], 0x0, 0xb}, {[{0x4a19}, {0x8c0, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x40, 0x2}, {0x1, 0x3}, {0xfffffffffffffffe, 0x3}, {0xfffffffffffff001}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x2}], [{0x10000, 0x6}, {0x9, 0x7}, {0x0, 0x3ff}, {0x7ff, 0xb9d}, {0x80000001, 0x82}, {0x8, 0x8}, {0x4, 0x1}, {0x240, 0x20}, {0x4, 0x2}, {0x1, 0x4}, {0x539d, 0x5}], 0x7, 0x6}, {[{0x1ff}, {0x1f, 0x3}, {0x6, 0x2}, {0x7f, 0x3}, {0x3f, 0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x6d85, 0x3}, {0x101}], [{0x5, 0xc8a}, {0x5, 0x1}, {0x9, 0x4}, {0x10000, 0x10000}, {0x80000001, 0xb73e}, {0x1ca, 0x2}, {0x7, 0x7}, {0x9df, 0x5f5}, {0x9, 0x9}, {0xdd76}, {0x1, 0x3}], 0xa, 0xa}, {[{0x9}, {0x1}, {0x9}, {0x1}, {0xc5, 0x2}, {0x0, 0x1}, {0x50}, {0x2d, 0x2}, {0x446, 0x2}, {0xffff, 0x3}, {0x7, 0x1}], [{0x3, 0x3}, {0xfffffffffffffffd, 0x4}, {0x3ff, 0x400}, {0x77, 0xc8}, {0xa0, 0xffffffffffffffc1}, {0x9, 0xffff}, {0xfff, 0xffffffff}, {0x7, 0x800}, {0x7fffffff}, {0x8, 0x5}, {0x2, 0x5}], 0x5, 0x6}, {[{0x1, 0x1}, {0x7}, {0x100000000}, {0x4, 0x3}, {0x5, 0x2}, {0xffff, 0x3}, {0x6, 0x2}, {0x7f, 0x1}, {0x7}, {0x7d, 0x3}, {0x7, 0x1}], [{0x3cab7ecc, 0x1}, {0x2, 0xe9e8}, {0x3ff, 0x481}, {0x3, 0xfffffffffffffff9}, {0x7, 0x7fc0000000000}, {0x8, 0x2}, {0xfff, 0x8}, {0x6, 0x8}, {0x5, 0xffff}, {0x3, 0x1000}, {0xca, 0xffffffff}], 0x7, 0xa}, {[{0x354, 0x3}, {0x80000000, 0x3}, {0x6f9f, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x8, 0x1}, {0x100000000}, {0x7, 0x3}, {0x803, 0x3}, {0x10000}, {0x7, 0x3}], [{0x8, 0x200}, {0x401, 0x7fffffff}, {0x0, 0x9}, {0x101, 0x5}, {0x1, 0x4}, {0xffffffffffffff7f, 0xd34e}, {0xfffffffffffffc00, 0x3d}, {0x0, 0x100}, {0x9, 0x3}, {0x5, 0x3}, {0x3, 0x81}], 0xb, 0xb}, {[{0x7fff, 0x1}, {0x9, 0x3}, {0x8, 0x3}, {0x1, 0x3}, {0x8, 0x3}, {0xffffffffffffffff}, {0x3f, 0x1}, {0x9, 0x2}, {0x81, 0x3}, {0x9}, {0x40, 0x2}], [{0x10001, 0x8001}, {0x1, 0x4}, {0xffffffff, 0x200}, {0x7ff, 0x3}, {0x0, 0x7f}, {0x6}, {0x8000, 0x4}, {0x78b6bd27, 0xfffffffffffffffd}, {0x4, 0x5}, {0x0, 0xffffffffffffff81}, {0x4, 0x2}], 0x2, 0x8}], 0x2, 0x1}}}, @limit={'limit\x00', 0x20, {{0x3, 0x9, 0xffffffffffffff7f, 0x7, 0x3, 0x4}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x1, 0xff}}}}, {{{0x0, 0x20, 0x6006, 'veth1_to_bond\x00', 'bcsh0\x00', 'bridge_slave_0\x00', 'bridge0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xf0, 0x128, 0x160, [@connbytes={'connbytes\x00', 0x18, {{0x2, 0x7, 0x1, 0x3}}}, @statistic={'statistic\x00', 0x18, {{0x0, 0x1, 0x10001, 0x3, 0x1, 0x2}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2}]}, 0xb90) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 431.832539][T23306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 431.853801][T23308] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 431.893032][T23310] input: syz0 as /devices/virtual/input/input1222 [ 431.905832][T23312] validate_nla: 8 callbacks suppressed [ 431.905842][T23312] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 431.954250][T23306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 431.964887][T23312] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:01 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) getuid() getuid() r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000380)=""/250, 0xfffffffffffffe58) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 05:16:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 432.060273][T23321] input: syz0 as /devices/virtual/input/input1223 05:16:02 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400400423ca0200cf", 0x1f) 05:16:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0) 05:16:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xffa8) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0xa00) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x3, 0x81, 0xf5b, 0x20, r3, 0xfffffffffffffffc}, 0x2c) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0xffffffdc}) 05:16:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 432.331413][T23346] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 432.369459][T23349] input: syz0 as /devices/virtual/input/input1224 [ 432.391894][T23351] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 432.413398][T23348] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 432.430542][T23345] mkiss: ax0: crc mode is auto. [ 432.478422][T23351] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:02 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, 0x0, 0x0) 05:16:02 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400590423ca0200cf", 0x1f) [ 432.625900][T23368] input: syz0 as /devices/virtual/input/input1225 05:16:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xff600000, 0x0, 0x0) 05:16:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000000002f, {0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10002}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28041, 0x0) recvmsg$kcm(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/92, 0x5c}], 0x6, &(0x7f0000000680)=""/11, 0xb}, 0x20) ioctl(r1, 0x7, &(0x7f0000000740)="05b6f937ae852c21417ac48a6532138c630be87e27e8f9c0a7b2ca23ce9d1203352c27d58c773cb8fef7f67bd7e1e03da009c9fad3f69d65bbd57e471cc7fec6f39776c9ce680dd1fc5335335af53e99d15624f0f57c47f7d9e7daa75af052ebf9da059cf72392110b54d342b0840f2a25593027342dc5d8708922c55782ec51767f07819d1892bc29709d4691d9039c54bb06b3b7ddb5acd3c9867aa36027") write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) epoll_create(0x7ff) 05:16:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40002019}) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgrp(0xffffffffffffffff) perf_event_open(0x0, r5, 0xa, 0xffffffffffffffff, 0xb) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000340)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xb0, "64a62a99a68ea4d98f8e7cd123950da0dafd3e33f2fdf0833ea6041d4f2ee0d12d5f92148dd851b1f690b849dafd1d7782aac9891a7c5036e938ac70d300baf56439cbc0dc0cc68694be5af8d5616078339c27a69b94b040b2387e091bbd76c8f36d755b6678812124bef08f519ca740f858c99aac519fade38b098ea420ca088a36c62ea72adced42fb61da994f3df857a30140749a416a0a1b63cf10978e1d55c0f5433c6be8bcf50c5cbd1728f54f"}, &(0x7f0000000100)=0xb8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x1ff, 0x2, 0x0, 0x3, r7}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}) ptrace(0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@local, @local}, &(0x7f0000000440)=0xc) r8 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r8, &(0x7f0000000040)="bc9fdf060f296b96709b2acf3608297cf57b67ecf79b997eec932ec8b5927932cbc68e0f6bc38d04ad40091b926f9194d8983253ceedbe82cc58d7ff0ff9c6", 0x3f) sendfile(r8, r8, &(0x7f0000001000), 0x10002) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000000)={0x9}) [ 433.128799][ C1] net_ratelimit: 23 callbacks suppressed [ 433.128827][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.141175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.231881][T23395] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 433.279369][T23398] input: syz0 as /devices/virtual/input/input1226 [ 433.332732][T23401] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:03 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, 0x0, 0x0) [ 433.425587][T23398] input: syz0 as /devices/virtual/input/input1227 05:16:03 executing program 4: syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c766", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f0200000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r7 = dup2(r0, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000) ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c") r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000) syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240)) 05:16:03 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, 0x0, 0x0) 05:16:03 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400630423ca0200cf", 0x1f) [ 433.608249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.614136][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x40) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3d57) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) 05:16:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xffff8000, 0x0, 0x0) [ 433.747867][T23425] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:03 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040), 0x0) [ 433.916844][T23436] input: syz0 as /devices/virtual/input/input1228 05:16:04 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400030423ca0200cf", 0x1f) [ 434.060830][T23436] input: syz0 as /devices/virtual/input/input1229 05:16:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x437}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 05:16:04 executing program 1: syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d) listen(r0, 0x51) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xd9, "53b026ae6d9fcc6c68a38b8c6da33fea5a30cee6af016bb8e66a25df7e7c28b9e97f5c311c41a514f88cac4512c4ee63bcc541a9c9167ff349e7a3f06954b61d211b199f3dcb4fed77f810d80e3aa17a3367f6f05444c7d166bf8326016bf55a8f927524d31b620a13269eb7303337f0c8798d593f2c06d064db1dc06009efc363bf5a777e8c941f5169f4805102fcdd38d26205016d3a84d619f3df8472a330bb8b97d12b8bbe2cff8aad3bcde5ec59977e79a0559f5a168b8cfc9826f1cba95efb66a8aeea7820e83a77dfff292b9ce8aec74e98b6804019"}, &(0x7f0000000000)=0xe1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x2c}, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0xb) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x7ffd, 0xfffffffffffffd35) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r3+30000000}) 05:16:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0) 05:16:04 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040), 0x0) [ 434.178212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.184091][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 434.347249][T23471] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:04 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040), 0x0) 05:16:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0xffff, 0x5, 0x4, 0x7, 0xce56}, 0x14) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:04 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0xffffffffffffffc2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c20000009100020081003000000c040000a0000200008e687eb1a8759e54da2bbbe793c9cb3e97635b4978f2a294e80ba5efd20f8053313163874646af95845a9ad4c7a1141e9b1c422afab69ba4230f47974c7fa47494e8923bb9436314c7c2fa39782f3bac8f57631d880e5b6e891677f49fd6e75ab6723278b34676797935"], 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x0) [ 434.418555][T23477] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0) 05:16:04 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400050423ca0200cf", 0x1f) [ 434.568213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.574086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.600532][T23487] input: syz0 as /devices/virtual/input/input1230 05:16:04 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000", 0x10) 05:16:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8910, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) close(r2) close(r1) [ 434.648251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.654053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.745307][T23509] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x10000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x2, 0x0, 0x5001, 0x1, 0xfffffffffffffffd, {0x1, 0x80000001}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3000000}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x8, 0x3, 0x1400, 0x8, 'syz1\x00', 0x100000000}, 0x0, 0x23, 0x10000, r2, 0x2, 0x0, 'syz0\x00', &(0x7f0000000140)=['hybla\x00', '/dev/amidi#\x00'], 0x12, [], [0x40, 0xffffffffffffff00, 0x5, 0x8]}) 05:16:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x16, 0x1, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc1) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:04 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000", 0x10) 05:16:04 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400090423ca0200cf", 0x1f) [ 434.962135][T23528] input: syz0 as /devices/virtual/input/input1232 05:16:04 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x44200, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa24, 0x0, "a89561fb1d160172bd0691aeb413e72e189df097f8013c78d13355fe09e1748b"}}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0xff, 0x1ff, 0x6, 0x3, 0x7, [{0x4, 0x3f, 0xffffffffffff8000}, {0x9, 0x1f, 0x14e, 0x0, 0x0, 0xd80}, {0x1, 0x1e8e89a2, 0x10000, 0x0, 0x0, 0x1800}, {0x0, 0x9, 0x8, 0x0, 0x0, 0x2}, {0x6, 0x40, 0xb9b, 0x0, 0x0, 0x800}, {0x43b, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x6, 0x4, 0x5, 0x0, 0x0, 0x2880}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) ioctl$void(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r0) io_cancel(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 435.095225][T23528] input: syz0 as /devices/virtual/input/input1233 05:16:05 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000", 0x10) 05:16:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfffffff6, 0x0, 0x0) 05:16:05 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b0004000a0423ca0200cf", 0x1f) 05:16:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x100000000000003, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x50013, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x82000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000000c0)={{0x6f, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e22, 0x2, 'nq\x00', 0x20, 0x2, 0x33}, {@empty, 0x4e20, 0x0, 0x6, 0xc, 0x4}}, 0x44) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'nlmon0\x00', 0x3}, 0x18) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='fd\x00') 05:16:05 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400590423ca0200cf", 0x1f) 05:16:05 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500", 0x18) [ 435.505683][T23565] input: syz0 as /devices/virtual/input/input1234 [ 435.590537][T23565] input: syz0 as /devices/virtual/input/input1235 05:16:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x4000000000, 0x0, 0x0) 05:16:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/149) socket$tipc(0x1e, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000029c0)='/proc/sys/net/ipv4/vs/sinc\x93ports\x00\xe2\x1f\x12k\xf1\x16\x8cH_\xcbpP\x02~\x7f\xdf\xe8Xe\xa7\xf1\t\xd5\xca\b\xe8\x933w#~\x1f\xa8Q\x7f\x02\x870|\x16\xb6z\xf9W\xbd>\xc9\xac\xc2\x9a\xc3mb\x80\x9d\xc5\x85\xbf!W\xc2\xd7\xa85D[B\xb5\xe2\xa2\x82\xf7\xab\xa2\x80\xa3\xb0\xed\xe4=\xbc\xda\xf4\xd2\x7f\xc6N\xc7_\xb5{\x11\x058\xf6~\x8eB\xd4\xacx.\xcd\n\xed\xf0\nJ\x06%\xd0\xf1d\x83\x029\x91\xf6\xaa\x0f\xc0\xd3\xa4\x1e\xa8\xcc\x80Y(\xce\x8b\xcf@\x17J@ rp\xa4\x16B\xa9\xe4\xf2\xff\x0eq\xc9h\xae\xcc\xaa\x1c^\x0f$\xed:3$a\x1fT\xda\x87\xe6\x99\x99\xf4q', 0x2, 0x0) 05:16:05 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400630423ca0200cf", 0x1f) 05:16:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000180)={0x9, 0x100, "1fba5cfbf666f2b3538bc46c4bbede1b9721a651ae33d69275d2b0b0add6eb5d", 0x8, 0x8, 0x80, 0x461e, 0x200}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000008000000000000000300000000000000180500000000000080000000000000000000000000000000000000000000000000000000000000000800000002000000090000000000000000000000000000008100000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 05:16:05 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500", 0x18) [ 435.948336][T23601] __nla_parse: 26 callbacks suppressed [ 435.948345][T23601] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 435.978891][T23599] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 436.023044][T23608] input: syz0 as /devices/virtual/input/input1236 [ 436.108801][T23608] input: syz0 as /devices/virtual/input/input1237 05:16:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x8003f1) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x1, 0x0) fchmod(r0, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) sched_setaffinity(0x0, 0x38a, &(0x7f00000000c0)=0x9) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x0, 0xffffffff000}) syz_open_dev$midi(0x0, 0x0, 0x8300) 05:16:06 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020223ca0200cf", 0x1f) 05:16:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500", 0x18) 05:16:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x8000000000, 0x0, 0x0) [ 436.295382][T23623] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0}) sendfile(r0, r0, &(0x7f0000000000), 0x7) [ 436.393672][T23630] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 436.419331][T23623] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TCSBRKP(r2, 0x5425, 0x6) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x1b) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca", 0x1c) 05:16:06 executing program 1: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x4, 0x8000, 0x8, 0x84000, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x28000, 0x0) tee(r0, r1, 0x7, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 05:16:06 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020323ca0200cf", 0x1f) 05:16:06 executing program 4: socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = fcntl$getown(r1, 0x9) sched_setparam(r2, &(0x7f0000000000)=0x2) fchdir(r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x400080) [ 436.682129][T23649] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 436.791749][T23664] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xc000000000, 0x0, 0x0) [ 436.882834][T23674] input: syz0 as /devices/virtual/input/input1239 05:16:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca", 0x1c) 05:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x65, "5da8f0490d03bbea40203a1dc63dff3d41db2b07ffd04b9b272b391c9bf829c8f14e4f6a60c734496c29a5d2efb1c631849e91d5071e3c0b394536a5ebc0a3d82f8f9f28eff692e9974fb60515d75aff408cb052e1192aee595cdbab7b47e52c1698e88195"}, &(0x7f00000000c0)=0x6d) r1 = accept4(r0, &(0x7f0000000300)=@ipx, &(0x7f0000000380)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300000e0}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x22c, r2, 0x120, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x188, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ad8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2400000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffff9cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ab}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd11}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x31}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x22c}}, 0x4008000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x6}}, 0x800, 0x7fe00000000}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xffffffffffff0fba, 0x5, 0x0, 0x0, r3}, 0xfffffffffffffe1a) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)='R', 0x1}], 0x1) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000002c0)) [ 436.939221][T23664] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 436.940811][T23673] validate_nla: 12 callbacks suppressed [ 436.940819][T23673] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 437.055601][T23684] input: syz0 as /devices/virtual/input/input1240 [ 437.083527][T23691] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth0\x00', 0x1000000000201f}) 05:16:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000280)=0xe8) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x29, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000100)={{0x3}}) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1030000, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@mmap='mmap'}, {@uname={'uname', 0x3d, 'overlay\x00'}}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}]}}) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) 05:16:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca", 0x1c) 05:16:07 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020523ca0200cf", 0x1f) 05:16:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x804, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000840)=r2) getegid() set_mempolicy(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irla\xbd\x15\x00\x00\x00\x00\x1f\x00\x00\x00\x00 ', 0x1012}) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r2}) socket$kcm(0x11, 0x0, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 437.406702][T23711] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 437.442536][T23712] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x400000000000, 0x0, 0x0) [ 437.530066][T23728] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:07 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r3) add_key(&(0x7f0000000840)='pk\xbf\xddR\x82\xc7\x9cL\x1f\x8b\xbe`\x7f$\xa8\x84\xf1A\x94\"\xc9\x0e\xae`\x13\xb3\xf5\x8e\xc58\x86\"\x8d\xdf\x97\xab\x14[\\\xe2\x1a\x8c\xeb\x05@v\xd0\xe6\x9as\xc3X3?FJ\xceW\x1c<\xac\xde\xec\x7f\x88\xef\x046\xfc\xac1\xf4\xd9\xd8\xd5\xecc\xa2\xc5p\xae\v\x0e2\xa5\a\x19\t\x95v:\xfd\xfd\xd5\x01U\xde%\x17:ICSPF\xc6UZ\xb8\x16\xe5q\xdb\x90\x16\xb7\x8c\xcbl\x80\xa8\xb9\xac\xad\a\xa8\xe3\\\xd2+\xd0\'3\xb7\xd8Zm\x98\xbb,A\xe8Y\x9f\x97P\x86\xf1]\xad\xc1\xfaD|\x93\xecT\x88u\x9fG\x88\"\b\xdf!', 0x0, 0x0, 0x20, r4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYBLOB="db000000e50198920eb4a0be80e4ea37c0ffb05aa361655cea46dfd2ff915acce744995f23915a5989a31145d0983c63ab64d829605f4be2ab8263a3e4e321e1d7de0b7adc8e7f255835a81cb9aae395c5edbc63cea4da464da59c325cfe565a5dcd63c1acaae434114105bb1d6484f2858a13be55806c648eb148b0fff5fe9eae1b48d2baa515b28dca4f4d37d49fc64f93a79a1e38b0a94eeeacff00f0492ebdb999f1935cfe6b214c2895ad968aee1599177f4f061e894245d92e5746e97d4db37ab09193984565c7000000000000000000000000000000000000000000"], &(0x7f00000001c0)=0xe3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xfffffffffffffd7e) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x100000190) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x1ff) memfd_create(&(0x7f0000000400)='*ppp1keyringem0-/eth1:+nodev60\x00', 0x1) sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, &(0x7f0000000300)="3819c3b57c3715d7940261bd0f99873bdaa2c49e488aa6336976fa91397f40c19fda", 0x22}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000500)=0x2, 0x4) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x7ff}, &(0x7f00000004c0)=0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_RUN(r6, 0xae80, 0x0) 05:16:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000000), 0x3fff) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc100) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xd300) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8203) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200", 0x1e) [ 437.719103][T23736] QAT: Invalid ioctl 05:16:07 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020623ca0200cf", 0x1f) [ 437.766990][T23736] input: syz0 as /devices/virtual/input/input1243 05:16:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801, 0x0}, 0x0) semget$private(0x0, 0x4, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3088000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@gettaction={0x134, 0x32, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x1c, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0xe, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3e, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffffff08}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) openat$tun(0xffffffffffffff9c, 0x0, 0x47ffe, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x401, 0xdc, "7cca5174b2741d0579419eb6b93ba61d7f6ff53756cbf3635664b1c5ae330e272495a81580017320cb9519a642f6e11cc3a7e52d695cd8418965ff1718919545b293e7cb99f43d85c8882b1149414a7c194fb9068e4e022b422de1ebcf34555b7dc7392cb5980bd2f4b8443c3b3a7a2c46bd13b5294394a72a89330fa340eb60b18f47a4e99bfa625eef476429f07e942840f5da27e747de07f944dfb96b3d78d9dbaf77c81d11e0b62942bd3a1ca7382dda49bc919207f7da24fd3e6e9c17026e3e2f8c65f39e5549272c578cc7c26a4504bb785001e7f1b55177b6"}, 0xe4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000004c0)={0x3, 0x7, [], {0x0, @reserved}}) 05:16:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200", 0x1e) [ 437.899019][T23754] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 437.927796][T23736] QAT: Invalid ioctl [ 437.955176][T23761] input: syz0 as /devices/virtual/input/input1244 05:16:08 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r1, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$rds(r0, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) fsetxattr(r0, &(0x7f00000002c0)=@random={'system.', '\x00'}, &(0x7f0000000300)='#mime_typecpuset^bdevsecurity+\x00', 0x1f, 0x1) recvfrom$x25(r0, &(0x7f0000000340)=""/176, 0xb0, 0x3, &(0x7f0000000400)={0x9, @null=' \x00'}, 0x12) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000440)=0x100000001, 0x1) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@bcast, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000500)=@bcast) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000540), 0x4) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000580)={0xcc8, 0x4, 0x6}) r2 = epoll_create1(0x80000) r3 = shmget$private(0x0, 0x4000, 0x820, &(0x7f0000ffa000/0x4000)=nil) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) r8 = fcntl$getown(r2, 0x9) r9 = getpgid(0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f00000008c0)={{0x200, r4, r5, r6, r7, 0x1, 0xfffffffffffffe01}, 0x1, 0x4, 0x7fff, 0x2, r8, r9}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000940)=0x2, 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000980)=0xffffffffffffffff, 0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000009c0)=0x5, 0x4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000a00)={0x101, 0x2, 0x29, 0x4, 0xc4d}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000ac0)={0x8}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000b00)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b40)={{0xa, 0x3, 0x4, 0x8, '\x00', 0x3}, 0x1, [0x35, 0x1000, 0x9, 0x81, 0xae, 0x100000001, 0x4, 0x0, 0x7fff, 0xed8, 0x400, 0x8, 0x5, 0x50, 0x6, 0x8000, 0x10001, 0xfffffffffffffff7, 0x1, 0x80000000, 0xdcfe, 0x1ff, 0x20, 0xe8, 0x8001, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x200, 0x51, 0x9, 0x1ff, 0x2, 0x8000, 0x40, 0x200, 0xc3f1, 0x6, 0x5, 0x4, 0x1, 0x8, 0x3, 0x5, 0x5, 0xc9, 0xc447, 0x1, 0xfff, 0xa5, 0xff, 0x8, 0x8, 0x5, 0x6, 0x401, 0x6, 0x9, 0xe574, 0x4, 0x40, 0x100000000, 0x1, 0x1ff, 0x1, 0x0, 0x100, 0x401, 0x5, 0x7fff, 0x7, 0x6, 0x10000, 0xfffffffffffffffc, 0x6, 0x7fffffff, 0xfffffffffffffff8, 0x55, 0x4, 0x9, 0x1, 0x17, 0x10001, 0x4, 0x10001, 0x5, 0x0, 0x80000000, 0x3, 0x1, 0x5, 0x2, 0x3, 0x6, 0x31, 0x3ff, 0xc00000000000000, 0x5, 0x9, 0xff, 0x80000001, 0x7f, 0x101, 0x400, 0x6, 0x2, 0x2, 0x5, 0x0, 0xffffffffffffa348, 0x3, 0x7, 0x1, 0x4, 0x7ff, 0x3e4, 0x0, 0x1f, 0x2, 0x70ee, 0xfffffffffffffffc, 0x1ff, 0x1, 0xf86, 0xf2, 0x2, 0xfffffffffffffff9, 0xa3, 0x10001], {0x0, 0x1c9c380}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001040)={0xaa, 0x4}) [ 438.031147][T23767] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 438.040474][T23757] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.049744][T23757] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:08 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200", 0x1e) 05:16:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:08 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020723ca0200cf", 0x1f) 05:16:08 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bc", 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x5fc, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="de", 0x1, 0x8800, 0x0, 0x0) dup3(r0, r1, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) [ 438.328246][ C1] net_ratelimit: 18 callbacks suppressed [ 438.328254][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.339781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 438.349291][T23785] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 438.363447][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 438.377493][T23787] input: syz0 as /devices/virtual/input/input1245 [ 438.429870][T23791] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 438.728202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.734074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 438.808347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.814189][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.831370][T23765] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.838494][T23765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.846097][T23765] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.853224][T23765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.909200][T23765] device bridge0 entered promiscuous mode [ 438.930281][T23798] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.937462][T23798] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.968221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.974022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.986117][T23798] device bridge0 left promiscuous mode [ 438.995122][T23808] input: syz0 as /devices/virtual/input/input1246 [ 439.239692][T23800] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.246779][T23800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.254181][T23800] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.261283][T23800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.268857][T23800] device bridge0 entered promiscuous mode 05:16:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x60ffffffffff, 0x0, 0x0) 05:16:09 executing program 0 (fault-call:2 fault-nth:0): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:09 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020a23ca0200cf", 0x1f) 05:16:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xfffffffffffffffc, 0x9}) r2 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x805) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040), 0x4) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000036c0)={0x8, "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", 0x1000}, 0xda70a876) 05:16:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x8ad0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x0, 0xfffffffffffff801, 0x0}, 0x0) semget$private(0x0, 0x4, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3088000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@gettaction={0x134, 0x32, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x1c, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0xe, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3e, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffffff08}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x20) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) openat$tun(0xffffffffffffff9c, 0x0, 0x47ffe, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x401, 0xdc, "7cca5174b2741d0579419eb6b93ba61d7f6ff53756cbf3635664b1c5ae330e272495a81580017320cb9519a642f6e11cc3a7e52d695cd8418965ff1718919545b293e7cb99f43d85c8882b1149414a7c194fb9068e4e022b422de1ebcf34555b7dc7392cb5980bd2f4b8443c3b3a7a2c46bd13b5294394a72a89330fa340eb60b18f47a4e99bfa625eef476429f07e942840f5da27e747de07f944dfb96b3d78d9dbaf77c81d11e0b62942bd3a1ca7382dda49bc919207f7da24fd3e6e9c17026e3e2f8c65f39e5549272c578cc7c26a4504bb785001e7f1b55177b6"}, 0xe4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000004c0)={0x3, 0x7, [], {0x0, @reserved}}) [ 439.368283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.380530][T23820] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 439.410115][T23822] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.412144][T23823] FAULT_INJECTION: forcing a failure. [ 439.412144][T23823] name failslab, interval 1, probability 0, space 0, times 0 [ 439.417807][T23822] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.443782][T23822] device bridge0 left promiscuous mode [ 439.446445][T23826] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 439.469545][T23823] CPU: 0 PID: 23823 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190201 #25 [ 439.478589][T23823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.478596][T23823] Call Trace: [ 439.478620][T23823] dump_stack+0x172/0x1f0 [ 439.478643][T23823] should_fail.cold+0xa/0x15 [ 439.478663][T23823] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 439.478679][T23823] ? lock_downgrade+0x880/0x880 [ 439.478695][T23823] ? ___might_sleep+0x163/0x280 [ 439.478713][T23823] __should_failslab+0x121/0x190 [ 439.478730][T23823] should_failslab+0x9/0x14 [ 439.478744][T23823] kmem_cache_alloc_node+0x265/0x710 [ 439.478756][T23823] ? __lock_acquire+0x54b/0x4790 [ 439.478771][T23823] ? is_bpf_text_address+0xac/0x170 [ 439.478792][T23823] __alloc_skb+0xd5/0x5e0 [ 439.478809][T23823] ? skb_trim+0x190/0x190 [ 439.478823][T23823] ? ___might_sleep+0x163/0x280 [ 439.478845][T23823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.541284][T23823] ? security_socket_getpeersec_dgram+0x93/0xc0 [ 439.541311][T23823] netlink_sendmsg+0x97b/0xd70 [ 439.541330][T23823] ? netlink_unicast+0x720/0x720 [ 439.541345][T23823] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 439.541365][T23823] ? apparmor_socket_sendmsg+0x2a/0x30 [ 439.561373][T23823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.577311][T23823] ? security_socket_sendmsg+0x93/0xc0 [ 439.577326][T23823] ? netlink_unicast+0x720/0x720 [ 439.577356][T23823] sock_sendmsg+0xdd/0x130 [ 439.591754][T23828] input: syz0 as /devices/virtual/input/input1247 [ 439.594547][T23823] sock_write_iter+0x27c/0x3e0 [ 439.594567][T23823] ? sock_sendmsg+0x130/0x130 [ 439.594592][T23823] ? __fget+0x340/0x540 [ 439.609341][T23823] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.635495][T23823] ? iov_iter_init+0xea/0x220 [ 439.640178][T23823] __vfs_write+0x613/0x8e0 [ 439.644598][T23823] ? kernel_read+0x120/0x120 [ 439.649195][T23823] ? common_file_perm+0x238/0x720 [ 439.654224][T23823] ? apparmor_file_permission+0x25/0x30 [ 439.659778][T23823] ? rw_verify_area+0x118/0x360 [ 439.664629][T23823] vfs_write+0x20c/0x580 [ 439.668875][T23823] ksys_write+0xea/0x1f0 [ 439.673119][T23823] ? __ia32_sys_read+0xb0/0xb0 [ 439.677886][T23823] ? do_syscall_64+0x26/0x610 [ 439.682560][T23823] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.688624][T23823] ? do_syscall_64+0x26/0x610 [ 439.693315][T23823] __x64_sys_write+0x73/0xb0 [ 439.697907][T23823] do_syscall_64+0x103/0x610 [ 439.702499][T23823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.708487][T23823] RIP: 0033:0x457e39 [ 439.712378][T23823] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.732204][T23823] RSP: 002b:00007f8983e5cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.740616][T23823] RAX: ffffffffffffffda RBX: 00007f8983e5cc90 RCX: 0000000000457e39 [ 439.748583][T23823] RDX: 000000000000001f RSI: 0000000020000040 RDI: 0000000000000003 [ 439.756550][T23823] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:16:09 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x12, 0x4, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x1000000000, [0x305f, 0x5f, 0xa]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='attr\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x404, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004014) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 439.764517][T23823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8983e5d6d4 [ 439.772483][T23823] R13: 00000000004c3b8d R14: 00000000004dc278 R15: 0000000000000004 05:16:09 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020b23ca0200cf", 0x1f) [ 439.833113][T23827] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.840289][T23827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.847639][T23827] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.854741][T23827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.892828][T23838] input: syz0 as /devices/virtual/input/input1248 [ 439.926170][T23842] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:09 executing program 0 (fault-call:2 fault-nth:1): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 439.952772][T23827] device bridge0 entered promiscuous mode 05:16:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/uinput\x00', 0xffffffffffffffff}, 0x30) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x81, 0x40, 0x8, 0x2, 0x0, 0x3, 0x20400, 0x1, 0x3, 0x3, 0x8, 0x1, 0x3ff, 0xffffffffffffffe1, 0x80, 0x0, 0x6a8c, 0x0, 0xff, 0x0, 0x800, 0x40, 0x9, 0x7, 0xfffffffffffffeff, 0x10000, 0xc555, 0x5, 0x79d2168f, 0xb092, 0x0, 0x7fff, 0x8, 0xffffffffffff8001, 0x8, 0x1000, 0x0, 0x0, 0x3, @perf_config_ext={0xcd2, 0x4b25}, 0x2011, 0x100000000, 0x100000001, 0xb, 0xa74b, 0x8d4, 0x100000000}, r2, 0x0, r3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:09 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400021223ca0200cf", 0x1f) [ 440.063331][T23851] FAULT_INJECTION: forcing a failure. [ 440.063331][T23851] name failslab, interval 1, probability 0, space 0, times 0 05:16:10 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x200000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x80000000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0xfffffffffffffffa, 0x4) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x10001, 0x100}, 0x8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0)=0x9, 0x4) write$P9_RLERRORu(r0, &(0x7f0000000300)={0x15, 0x7, 0x1, {{0x8, 'proc%@,*'}, 0x2}}, 0x15) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r2, 0xe9d7}, &(0x7f0000000380)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'batadv0\x00', 0x8010}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)={r3, 0x0, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="c9aec6b1b1c913b98307e59a6f8e02c6417ef8df28fd109c50707f777eb5b3a02d82b25a7dc4444c9605ee468854aa3968a0e40970c4493253b8072dc79e1dc3b7ae1b9248f5197017e428dcad", 0x4d, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r4, 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000005c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000680)={{0x4, 0x3, 0x459, 0x5, '\x00', 0x3ff}, 0x3, 0x10000440, 0x9, r5, 0x6, 0x8, 'syz1\x00', &(0x7f0000000600)=['+cpuset.%\xca!\xf3selfppp1keyring/cgroup#\x00', '}vboxnet1\x00', '%md5sumself*\x00', '\x00', 'eth1@vboxnet1\x00', '\'selinuxmd5sum*em0selinuxsecurity\x00'], 0x6c, [], [0x5, 0x9, 0x0, 0xfff]}) write$P9_RMKDIR(r0, &(0x7f00000007c0)={0x14, 0x49, 0x1, {0x0, 0x3, 0x4}}, 0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000800)='nbd\x00') ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000840)={0x0, {0x30000000000000, 0x7ff}}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3c3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x78}}, 0x4040000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000a00)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000a40)=""/71) ioctl$KDENABIO(r0, 0x4b36) ioctl$VT_DISALLOCATE(r0, 0x5608) process_vm_readv(r5, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/219, 0xdb}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/2, 0x2}, {&(0x7f0000000cc0)=""/9, 0x9}, {&(0x7f0000000d00)=""/2, 0x2}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/87, 0x57}, {&(0x7f0000000e00)=""/244, 0xf4}], 0x8, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/96, 0x60}, {&(0x7f0000001000)=""/124, 0x7c}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/118, 0x76}, {&(0x7f0000001140)=""/81, 0x51}], 0x5, 0x0) accept4$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001300)=0x14, 0x80000) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)=@newqdisc={0xf0, 0x24, 0xb08, 0x70bd2d, 0x25dfdbfb, {0x0, r7, {0xb, 0xfff1}, {0xffef, 0x2}, {0xfff1, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x2, {{0x8000, 0x8001, 0x1f, 0x8e, 0x96}, 0x100, 0x0, 0x4, 0x5, 0x80, 0x10, 0x800, 0xf, 0x2, {0x1, 0x80000001, 0x2, 0x1000, 0x8, 0x1}}}}, @TCA_STAB={0x6c, 0x8, [@TCA_STAB_DATA={0xc, 0x2, [0x20, 0x2, 0x4]}, @TCA_STAB_DATA={0x18, 0x2, [0x2f5, 0x100000001, 0x4, 0x40, 0x1, 0x4, 0x23fa, 0x9fe0, 0xffffffff, 0x361a]}, @TCA_STAB_BASE={0x1c, 0x1, {0x7, 0x450, 0x1, 0x7ff, 0x1, 0x3, 0x3, 0xa}}, @TCA_STAB_DATA={0xc, 0x2, [0x0, 0x3, 0x2, 0x1000]}, @TCA_STAB_BASE={0x1c, 0x1, {0x0, 0x2, 0x9, 0x0, 0x0, 0x100, 0x4, 0x2}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 440.139212][T23856] input: syz0 as /devices/virtual/input/input1249 [ 440.213072][T23863] input: syz0 as /devices/virtual/input/input1250 [ 440.228983][T23851] CPU: 0 PID: 23851 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190201 #25 [ 440.238033][T23851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.248092][T23851] Call Trace: [ 440.251397][T23851] dump_stack+0x172/0x1f0 [ 440.255745][T23851] should_fail.cold+0xa/0x15 [ 440.260352][T23851] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 440.266184][T23851] ? lock_downgrade+0x880/0x880 [ 440.271044][T23851] ? ___might_sleep+0x163/0x280 [ 440.275906][T23851] __should_failslab+0x121/0x190 [ 440.280854][T23851] should_failslab+0x9/0x14 [ 440.285369][T23851] kmem_cache_alloc_node_trace+0x270/0x720 [ 440.291193][T23851] ? __alloc_skb+0xd5/0x5e0 [ 440.295713][T23851] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 440.301879][T23851] __kmalloc_node_track_caller+0x3d/0x70 [ 440.307523][T23851] __kmalloc_reserve.isra.0+0x40/0xf0 [ 440.312907][T23851] __alloc_skb+0x10b/0x5e0 [ 440.317332][T23851] ? skb_trim+0x190/0x190 [ 440.321668][T23851] ? ___might_sleep+0x163/0x280 [ 440.326527][T23851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.332780][T23851] ? security_socket_getpeersec_dgram+0x93/0xc0 [ 440.339032][T23851] netlink_sendmsg+0x97b/0xd70 [ 440.343813][T23851] ? netlink_unicast+0x720/0x720 [ 440.348757][T23851] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 440.354323][T23851] ? apparmor_socket_sendmsg+0x2a/0x30 [ 440.359794][T23851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.366046][T23851] ? security_socket_sendmsg+0x93/0xc0 [ 440.371516][T23851] ? netlink_unicast+0x720/0x720 [ 440.376467][T23851] sock_sendmsg+0xdd/0x130 [ 440.380898][T23851] sock_write_iter+0x27c/0x3e0 [ 440.385675][T23851] ? sock_sendmsg+0x130/0x130 [ 440.390377][T23851] ? __fget+0x340/0x540 [ 440.394566][T23851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.400814][T23851] ? iov_iter_init+0xea/0x220 [ 440.405510][T23851] __vfs_write+0x613/0x8e0 [ 440.409943][T23851] ? kernel_read+0x120/0x120 [ 440.414543][T23851] ? common_file_perm+0x238/0x720 [ 440.419590][T23851] ? apparmor_file_permission+0x25/0x30 [ 440.425156][T23851] ? rw_verify_area+0x118/0x360 [ 440.430024][T23851] vfs_write+0x20c/0x580 [ 440.434293][T23851] ksys_write+0xea/0x1f0 [ 440.438565][T23851] ? __ia32_sys_read+0xb0/0xb0 [ 440.443351][T23851] ? do_syscall_64+0x26/0x610 [ 440.448045][T23851] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.454121][T23851] ? do_syscall_64+0x26/0x610 [ 440.458818][T23851] __x64_sys_write+0x73/0xb0 [ 440.463427][T23851] do_syscall_64+0x103/0x610 [ 440.468034][T23851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.473929][T23851] RIP: 0033:0x457e39 [ 440.477836][T23851] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.497445][T23851] RSP: 002b:00007f8983e5cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.505866][T23851] RAX: ffffffffffffffda RBX: 00007f8983e5cc90 RCX: 0000000000457e39 05:16:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x740000000000, 0x0, 0x0) 05:16:10 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400025923ca0200cf", 0x1f) 05:16:10 executing program 4: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xb0, r1, 0x320, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe3a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ba}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x939}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @rand_addr="c3475a3e295981bb8475cec9286f3cdd", 0x81}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472612e01000000000000006e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x843) dup2(r2, r2) inotify_rm_watch(r0, r3) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000001c0)) [ 440.513849][T23851] RDX: 000000000000001f RSI: 0000000020000040 RDI: 0000000000000003 [ 440.521834][T23851] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 440.529814][T23851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8983e5d6d4 [ 440.537796][T23851] R13: 00000000004c3b8d R14: 00000000004dc278 R15: 0000000000000004 05:16:10 executing program 0 (fault-call:2 fault-nth:2): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:10 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x12, 0x4, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x1000000000, [0x305f, 0x5f, 0xa]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='attr\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x404, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004014) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 05:16:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x505102, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2001, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x5, &(0x7f0000000100)='em1%\x00'}, 0x30) wait4(r4, &(0x7f0000000180), 0x20000002, &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:10 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020459ca0200cf", 0x1f) [ 440.791967][T23884] FAULT_INJECTION: forcing a failure. [ 440.791967][T23884] name failslab, interval 1, probability 0, space 0, times 0 05:16:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000220000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006bc7f3570efc7347f8666716"], 0x78) r1 = syz_open_pts(r0, 0x224000) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x82ffffff}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000080)=0x80, 0x80000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) [ 440.851308][T23894] input: syz0 as /devices/virtual/input/input1251 [ 440.886170][T23884] CPU: 0 PID: 23884 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190201 #25 [ 440.895327][T23884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.905470][T23884] Call Trace: [ 440.908934][T23884] dump_stack+0x172/0x1f0 [ 440.913268][T23884] should_fail.cold+0xa/0x15 [ 440.917851][T23884] ? __netlink_lookup+0x3c8/0x7a0 [ 440.922865][T23884] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 440.928664][T23884] ? netlink_deliver_tap+0x146/0xbf0 [ 440.933936][T23884] __should_failslab+0x121/0x190 [ 440.938861][T23884] should_failslab+0x9/0x14 [ 440.943350][T23884] kmem_cache_alloc+0x47/0x710 [ 440.948098][T23884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.954330][T23884] ? check_preemption_disabled+0x48/0x290 [ 440.960031][T23884] ? lock_acquire+0x16f/0x3f0 [ 440.964698][T23884] skb_clone+0x150/0x3b0 [ 440.968929][T23884] netlink_deliver_tap+0x952/0xbf0 [ 440.974033][T23884] netlink_unicast+0x5a7/0x720 [ 440.978787][T23884] ? netlink_attachskb+0x770/0x770 [ 440.983883][T23884] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 440.989587][T23884] ? __check_object_size+0x3d/0x42f [ 440.994775][T23884] netlink_sendmsg+0x8ae/0xd70 [ 440.999527][T23884] ? netlink_unicast+0x720/0x720 [ 441.004468][T23884] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 441.009999][T23884] ? apparmor_socket_sendmsg+0x2a/0x30 [ 441.015445][T23884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.021671][T23884] ? security_socket_sendmsg+0x93/0xc0 [ 441.027121][T23884] ? netlink_unicast+0x720/0x720 [ 441.032044][T23884] sock_sendmsg+0xdd/0x130 [ 441.036445][T23884] sock_write_iter+0x27c/0x3e0 [ 441.041203][T23884] ? sock_sendmsg+0x130/0x130 [ 441.045872][T23884] ? __fget+0x340/0x540 [ 441.050011][T23884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.056242][T23884] ? iov_iter_init+0xea/0x220 [ 441.060909][T23884] __vfs_write+0x613/0x8e0 [ 441.065314][T23884] ? kernel_read+0x120/0x120 [ 441.069888][T23884] ? common_file_perm+0x238/0x720 [ 441.074906][T23884] ? apparmor_file_permission+0x25/0x30 [ 441.080440][T23884] ? rw_verify_area+0x118/0x360 [ 441.085281][T23884] vfs_write+0x20c/0x580 [ 441.089511][T23884] ksys_write+0xea/0x1f0 [ 441.093742][T23884] ? __ia32_sys_read+0xb0/0xb0 [ 441.098491][T23884] ? do_syscall_64+0x26/0x610 [ 441.103150][T23884] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.109206][T23884] ? do_syscall_64+0x26/0x610 [ 441.113871][T23884] __x64_sys_write+0x73/0xb0 [ 441.118446][T23884] do_syscall_64+0x103/0x610 [ 441.123022][T23884] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.128897][T23884] RIP: 0033:0x457e39 [ 441.132777][T23884] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.152472][T23884] RSP: 002b:00007f8983e5cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.160864][T23884] RAX: ffffffffffffffda RBX: 00007f8983e5cc90 RCX: 0000000000457e39 [ 441.168816][T23884] RDX: 000000000000001f RSI: 0000000020000040 RDI: 0000000000000003 [ 441.176771][T23884] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 441.184729][T23884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8983e5d6d4 [ 441.192684][T23884] R13: 00000000004c3b8d R14: 00000000004dc278 R15: 0000000000000004 05:16:11 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0300cf", 0x1f) [ 441.261112][T23906] input: syz0 as /devices/virtual/input/input1252 [ 441.311915][T23912] __nla_parse: 22 callbacks suppressed [ 441.311925][T23912] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001a40)=""/4096}, {&(0x7f0000000100)=""/11}, {&(0x7f0000000200)=""/52}, {&(0x7f0000000240)=""/207}, {&(0x7f0000000340)=""/87}, {&(0x7f0000001800)=""/226}, {&(0x7f0000001580)=""/66}]}}], 0x27b, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001640)='/dev/cachefiles\x00', 0x220000, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000003b00), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 441.384741][T23912] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:11 executing program 0 (fault-call:2 fault-nth:3): r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x60) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x7f2f200c7000, 0x0, 0x0) 05:16:11 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0500cf", 0x1f) [ 441.663844][T23928] FAULT_INJECTION: forcing a failure. [ 441.663844][T23928] name failslab, interval 1, probability 0, space 0, times 0 [ 441.676821][T23928] CPU: 0 PID: 23928 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190201 #25 [ 441.686317][T23928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.686325][T23928] Call Trace: [ 441.686345][T23928] dump_stack+0x172/0x1f0 [ 441.686369][T23928] should_fail.cold+0xa/0x15 [ 441.708606][T23928] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 441.714946][T23928] ? __kernel_text_address+0xd/0x40 [ 441.718711][T23941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 441.720166][T23928] ? unwind_get_return_address+0x61/0xa0 [ 441.720188][T23928] __should_failslab+0x121/0x190 [ 441.720208][T23928] should_failslab+0x9/0x14 [ 441.744424][T23928] kmem_cache_alloc+0x47/0x710 [ 441.749198][T23928] ? check_preemption_disabled+0x48/0x290 [ 441.754914][T23928] ? lock_acquire+0x16f/0x3f0 [ 441.754941][T23928] skb_clone+0x150/0x3b0 [ 441.755026][T23928] dev_queue_xmit_nit+0x2f0/0x980 [ 441.764086][T23941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 441.768941][T23928] ? validate_xmit_xfrm+0x42d/0xf30 [ 441.768965][T23928] dev_hard_start_xmit+0xbb/0x980 [ 441.788245][T23928] ? check_preemption_disabled+0x48/0x290 [ 441.793978][T23928] __dev_queue_xmit+0x270d/0x3000 [ 441.799009][T23928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.805255][T23928] ? should_fail+0x1de/0x852 [ 441.809857][T23928] ? netdev_pick_tx+0x300/0x300 [ 441.814718][T23928] ? __copy_skb_header+0x2e8/0x560 [ 441.819843][T23928] ? __skb_checksum_complete+0x3f0/0x3f0 [ 441.825488][T23928] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 441.831649][T23928] ? skb_clone+0x150/0x3b0 [ 441.836073][T23928] ? rcu_read_lock_sched_held+0x110/0x130 [ 441.841805][T23928] ? kasan_check_write+0x14/0x20 [ 441.846754][T23928] ? __skb_clone+0x5c8/0x820 [ 441.851360][T23928] dev_queue_xmit+0x18/0x20 [ 441.855868][T23928] ? dev_queue_xmit+0x18/0x20 [ 441.860552][T23928] netlink_deliver_tap+0x8e7/0xbf0 [ 441.865681][T23928] netlink_unicast+0x5a7/0x720 [ 441.870456][T23928] ? netlink_attachskb+0x770/0x770 [ 441.875576][T23928] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 441.881303][T23928] ? __check_object_size+0x3d/0x42f [ 441.886512][T23928] netlink_sendmsg+0x8ae/0xd70 [ 441.891287][T23928] ? netlink_unicast+0x720/0x720 [ 441.896230][T23928] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 441.901789][T23928] ? apparmor_socket_sendmsg+0x2a/0x30 [ 441.907256][T23928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.913506][T23928] ? security_socket_sendmsg+0x93/0xc0 [ 441.918973][T23928] ? netlink_unicast+0x720/0x720 [ 441.923922][T23928] sock_sendmsg+0xdd/0x130 [ 441.928351][T23928] sock_write_iter+0x27c/0x3e0 [ 441.933137][T23928] ? sock_sendmsg+0x130/0x130 [ 441.937826][T23928] ? __fget+0x340/0x540 [ 441.941988][T23928] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.948236][T23928] ? iov_iter_init+0xea/0x220 [ 441.952922][T23928] __vfs_write+0x613/0x8e0 [ 441.957348][T23928] ? kernel_read+0x120/0x120 [ 441.961947][T23928] ? common_file_perm+0x238/0x720 [ 441.966986][T23928] ? apparmor_file_permission+0x25/0x30 [ 441.972550][T23928] ? rw_verify_area+0x118/0x360 [ 441.977414][T23928] vfs_write+0x20c/0x580 [ 441.981670][T23928] ksys_write+0xea/0x1f0 [ 441.985922][T23928] ? __ia32_sys_read+0xb0/0xb0 [ 441.990695][T23928] ? do_syscall_64+0x26/0x610 [ 441.995380][T23928] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.001453][T23928] ? do_syscall_64+0x26/0x610 [ 442.006168][T23928] __x64_sys_write+0x73/0xb0 [ 442.011033][T23928] do_syscall_64+0x103/0x610 [ 442.015639][T23928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.021533][T23928] RIP: 0033:0x457e39 [ 442.025436][T23928] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.045045][T23928] RSP: 002b:00007f8983e5cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.053460][T23928] RAX: ffffffffffffffda RBX: 00007f8983e5cc90 RCX: 0000000000457e39 05:16:11 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0300cf", 0x1f) 05:16:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/20, 0x14}, 0x120) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000100)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x58}) write$UHID_DESTROY(r0, &(0x7f0000000380), 0x4) 05:16:12 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0900cf", 0x1f) [ 442.061523][T23928] RDX: 000000000000001f RSI: 0000000020000040 RDI: 0000000000000003 [ 442.069502][T23928] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 442.077477][T23928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8983e5d6d4 [ 442.085453][T23928] R13: 00000000004c3b8d R14: 00000000004dc278 R15: 0000000000000004 [ 442.124181][T23947] input: syz0 as /devices/virtual/input/input1253 [ 442.147813][T23950] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 442.166007][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.184263][T23954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 442.206623][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.209814][T23959] validate_nla: 12 callbacks suppressed [ 442.209822][T23959] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 442.240126][T23954] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.252387][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.270810][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.281477][T23954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 442.284109][T23947] input: syz0 as /devices/virtual/input/input1254 [ 442.297362][T23962] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.300557][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 05:16:12 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) 05:16:12 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0a00cf", 0x1f) [ 442.336534][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.345680][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.367261][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 05:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140)="212b000000b152c02f1aa895435b4fe4bff3fc4c3ca63793002b64adf5a096a69c", 0x21, 0xfffffffffffffffc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x4, 0x8000, 0x6, 0xa28d}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e22, 0xfffffffffffffff9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}}, 0x7, 0x5}, &(0x7f00000000c0)=0x90) recvfrom(r2, &(0x7f0000003240)=""/4096, 0xfffffffffffffff6, 0x0, 0x0, 0xfffffffffffffc78) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0xc00, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) [ 442.401077][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.414287][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.422497][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.430559][T23971] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 442.440037][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.458068][T23971] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.468202][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.477293][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.485689][T23971] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 442.495530][T23975] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:12 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca5900cf", 0x1f) [ 442.504924][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.522245][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.540461][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 05:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_emit_ethernet(0x207843, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa020000000000f80460b4090000aedd0027002800020000000000ffffe0000002ff0300000000000000000000000000012b0090780009040060b680fa0000000000000000000000000000ffffffffffff0000000000000000000700000000000000284de8cdf3fc4751093f5dcd0ebf71bd411567b2f8cbad2fd95f938d005fc574cf17491c33d6a1b243db0d291ab59cd68be5459e3f6d6682b84d30fd62cdcb816f3599afe0b6bbabe5a0c28e79374a28a01662c9d4065cc443451eabf0092868474489ed8292b3214ed646231c51ee742482131e7dbc0a210cffe2f6c721693a92318000000004000000000000007700798de3de23ea5c29132575ee560200ed6bbe86497565994b05f25f34799925dd19bf255263d4941c39635ef31b731b5c3ec1a12c92"], 0x0) [ 442.562515][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.591158][T23981] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 442.603410][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.612628][ T17] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 442.625279][T23981] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.650764][ T17] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 442.677007][T23984] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.737916][T23928] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:16:12 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000000c0)={0xfffffffffffffc00, 0x6cb9}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1b) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) sendto(r1, &(0x7f0000000000)="a7fb155124c50cd3ca9dacd4ecbcf810dc0229bbdbd3b593bf852fe4c44320e4510f756d2f", 0x25, 0x20000001, 0x0, 0x0) 05:16:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x7fffffffefff, 0x0, 0x0) 05:16:12 executing program 1: socketpair$unix(0x1, 0x800000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd4, 0x2000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="bfe68000ffffffff181200009042c6e5e8d1d7cb49c505e57a1497c4910eedca155b09396724ef126b8819160cd11e979f77761528050000000a68ead6d2f6da0ea8b1efcf4dfd17bcef9e1d48e9c3d417c08e7c", @ANYRES32=r2, @ANYBLOB="000000000000000018000000070000000b00000009000000347ffaff01000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0xfffffffffffffda7) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000300)={[0x7000, 0x10f000, 0xf000, 0x1], 0x101, 0x4, 0x3}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000240)=""/89) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r3, 0x3}}, 0x18) 05:16:12 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca6300cf", 0x1f) [ 442.817167][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.846151][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.920565][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 442.943167][T24000] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 442.954484][T24003] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 442.966687][T24007] QAT: Invalid ioctl [ 442.987342][T24007] input: syz0 as /devices/virtual/input/input1255 [ 442.999838][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.049566][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.057987][T24015] QAT: Invalid ioctl [ 443.084677][T24015] input: syz0 as /devices/virtual/input/input1256 [ 443.101133][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.132188][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.162961][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.172382][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.180226][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.187740][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.195688][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.203483][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.224067][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.234397][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.247485][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.264260][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.274758][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.285215][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.300431][ T17] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 443.316289][ T17] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 05:16:13 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="0f0000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:13 executing program 1: clone(0x807ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x1, 0x1, 0x6, 0x0, 0x7fff, "436f4dfbfd5ce11d099eac55cbce95c0b01e4a4bdefe7bb40643af4c6e6f38e4a5ccc0e66a6ec4f6a32a9401e2a22333fab85e0b785b15ec261aef08b1debd", 0x3d}, 0x60) perf_event_open(&(0x7f000001d000)={0x200000002, 0x75, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x0, 0x1fcc}]}, 0xc, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x2, @empty, 0xfffffffffffffffa}], 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 05:16:13 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0202cf", 0x1f) 05:16:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xadf, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x8c34, 0x4) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 443.528242][ C1] net_ratelimit: 23 callbacks suppressed [ 443.528250][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 443.539798][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:13 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="590000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:13 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x1, 0x40001) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xff60}, 0xe3c7) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xfffffffffffffd60) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) pivot_root(0x0, 0x0) ioctl$int_out(r1, 0x0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000040)=0xfffffffffffff000) getegid() ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x1}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000000)={0x6}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x8000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap='mmap'}, {@version_9p2000='version=9p2000'}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '\x86'}}]}}) mount(0x0, 0x0, &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='P\xf0selinuxcgroup\x00') fcntl$getown(0xffffffffffffffff, 0x9) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x3) fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x9}]}, 0xc, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x20044880) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48) r3 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000001180), 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226) 05:16:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/ip6_tables_targets\x00') 05:16:13 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0203cf", 0x1f) 05:16:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_ts_info}) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @broadcast}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) accept$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001a80)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001bc0)={@loopback, @dev, 0x0}, &(0x7f0000001c00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001c40)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000001d40)=0xe8) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r2, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000002200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002240)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000027c0)={&(0x7f0000000000), 0xc, &(0x7f0000002780)={&(0x7f0000002280)=ANY=[@ANYBLOB="ec040000", @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="f400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000010000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="a001020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ffffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756559655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004006344000008000100", @ANYRES32=r11, @ANYBLOB="2c02020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000104000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000002000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040000080000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 05:16:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x940000000000, 0x0, 0x0) [ 443.692520][T24056] input: syz0 as /devices/virtual/input/input1258 [ 443.700719][T24055] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted [ 443.752503][T24064] input: syz0 as /devices/virtual/input/input1259 05:16:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="c00000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000100)={0x8000000000000000, 0x4000, 0x1, 0x8, 0x1f}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000d80)}, 0x0) 05:16:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0204cf", 0x1f) 05:16:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x415befe5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x50, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28}]}]}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x10000000000002cb, &(0x7f0000000100), 0x0, 0x20000004}], 0x492492492492805, 0x0) 05:16:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x800) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f) 05:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1000000000000, 0x0, 0x0) 05:16:14 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x3, 0x2}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'ip6gretap0\x00', 0x2, 0x4949}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) kcmp(0x0, 0x0, 0x7, r0, r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="048f4b65aa6da868653dc53e61ef0045", 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80605414) [ 444.168212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.174028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.178529][T24101] input: syz0 as /devices/virtual/input/input1260 05:16:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0205cf", 0x1f) 05:16:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) waitid(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000040)="8d2fb053c93ab9f4b9e769fdcbec034ea470b9e6999a852f0b39d8111d264411d0ea100b856d254d67db5075a6fd10128293c84e6707654d505300cfc385e74175be690dbf663f879c78", 0x4a) 05:16:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="c00e00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0206cf", 0x1f) 05:16:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x125, 0x40000028, r1, 0x0) r2 = dup3(r0, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x3, 0x1, 0x8, &(0x7f00000001c0)}, 0x20) keyctl$set_reqkey_keyring(0xe, 0x4000004) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="58c2cd", 0x3}, {&(0x7f00000000c0)="f87557ac58eac7ccedd3146385ac0aecbd6e4b7864dfc46c944bd7", 0x1b}, {&(0x7f0000000100)="f9a6c2fafcc4587ee36883b2a196f6600c2ec9c2efec78bc", 0x18}, {&(0x7f0000000200)="fdc401b85765d84734f474cf07b373df6a1f667faf40723ee4e056c2ebdce7abf6e64dd3b0032ade6d99136a9fc5bd8fc1af26c0b9f6b445773696ea2ffdfc5bdfed0c967704f2adcd3696aa3af4e56ca1598c521c18b875da5b0caf8c29980567aa6da39cc4e80e77549f37ebe3a35d5a74091237c3197291917548098185189fb68118fe5a6eff6ea544deaffe8f9ed6fe11b4d317aa99457a19c39276a03acbb1788e9bf67d975ff3491e36efbb460801f87b40732b0d69ed4c7d6ea51311b8c735710bc4ab426091", 0xca}], 0x4, 0x0, 0x0, 0x8000}, 0x10) syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) 05:16:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/49) 05:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x20000000000000, 0x0, 0x0) 05:16:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="effd00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0207cf", 0x1f) 05:16:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1000000000000, 0x0, 0x0) [ 444.648551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.654382][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.705913][T24159] input: syz0 as /devices/virtual/input/input1263 05:16:14 executing program 1: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8100000000000000ecacedf15974c275ef5a514e37faa573bd60e89096c332dcf6196263856a9c2754caaaca7986dcc340b4436b555d684a1dd31265dc6b5456f9ce13d4c4d2efaa051699488f9c1e33f3e110abfd4bbe5fdf303da520a5e7a139cc4433ce8c1e959954af371dc83992b35beb8a271e82514308edec8eca21ebb669982c88b3a8c4049d166fc6126eecc9c132d8d2f93bb0860f00000000000000000000000000000000"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x800, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x103800) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) 05:16:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="e03f03000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0208cf", 0x1f) [ 444.858527][T24175] input: syz0 as /devices/virtual/input/input1264 05:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x20710000000000, 0x0, 0x0) [ 444.968203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.974020][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:14 executing program 1: seccomp(0x1, 0x1, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000300)=0x54) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0xfffffffffffffdca, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x0, 0x0, {0x3, 0x81, 0x7, 0x3}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x8c00, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x4a}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r3, r4, 0x10001}) 05:16:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x2000) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000080)=0x567f) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:15 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="5f0000200104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:15 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca020acf", 0x1f) 05:16:15 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x22000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000001c0)={0xffffffff, "2d3f8da8a9f33bff926699aa65012bed66293525f9d8a8d893cd486559a77643", 0x2, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x33c, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x8, @pix_mp}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x2e, 0x4040) [ 445.288239][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.294061][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:15 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="effdffff0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000000)='{', 0x1}], 0x1) close(r1) close(r2) 05:16:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x700c202f7f0000, 0x0, 0x0) 05:16:15 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca020ecf", 0x1f) 05:16:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4000000001) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, r3, 0x600, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2d3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fdd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8004}, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r3 = dup2(r2, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x3]}, 0x6) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0x800, 0x7, {0xfffffffffffffffc, 0x0, 0x0, 0x400001}}, 0x20) 05:16:15 executing program 4: syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x359a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/tcp\x00') setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) fchdir(0xffffffffffffffff) getpgid(0x0) sched_setparam(0x0, 0x0) mkdir(0x0, 0x0) rmdir(0x0) mkdir(0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000080)={{0x5, 0x3, 0x1, 0x0, '\x00', 0xe96}, 0x0, [0x7, 0x5, 0x80000000, 0x7ff, 0x800, 0x6, 0xffffffff, 0x4, 0x1, 0x4, 0x100, 0xac, 0x7, 0x6, 0x1, 0x2, 0x2e7d, 0x3, 0x7d6, 0x3, 0x400, 0x1, 0x2, 0x8, 0x83, 0x3ff, 0x8000, 0x3, 0x8, 0x0, 0x3, 0x6, 0x55f4e683, 0xa61, 0x76480, 0x5c, 0x8, 0x5, 0x0, 0x3dfa, 0x5f, 0x4f, 0x9, 0xffffffffffffff80, 0x0, 0x331dd914, 0x8, 0x3, 0x8000, 0x7fff, 0x2f, 0x81, 0xfffffffffffffffa, 0xb2, 0x5, 0x7, 0x9, 0x6, 0x7f, 0x20ef91bb, 0x1, 0x8000, 0x0, 0x8, 0x8001, 0x3, 0xc7, 0x0, 0x8001, 0x8000, 0x4, 0x4, 0x1, 0x5, 0x7, 0x1, 0xe1f0, 0xb6, 0x3, 0x2, 0x1f, 0x80000001, 0x8, 0x9, 0x9b9, 0x0, 0x81, 0x8001, 0xfffffffffffffffa, 0x8001, 0x7, 0x9, 0x80000001, 0x10000, 0x1000, 0x81, 0xff, 0x4, 0x100, 0x1000, 0x6, 0x9, 0x7e, 0x1ff, 0x200, 0xffffffffedc175ac, 0x100000000, 0x7, 0x5, 0x20, 0x0, 0x4, 0x2, 0x4a, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x8, 0x60000000000000, 0x544, 0x60c1, 0x7a3, 0x80000000, 0x5, 0x8, 0x3, 0x9], {r2, r3+30000000}}) rename(0x0, 0x0) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) 05:16:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x33, 0x3b, 0x6, 0x11, 0xb, 0x6606f7e8, 0x4, 0x4a, 0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x400003) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) 05:16:15 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca020fcf", 0x1f) 05:16:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x480001, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x27c, 0x9, 0x6, 0x3, 0xffff}) close(r0) [ 446.155563][T24268] input: syz0 as /devices/virtual/input/input1267 05:16:16 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0210cf", 0x1f) 05:16:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0) [ 446.202744][T24268] Unknown ioctl 1076129799 [ 446.330534][T24288] __nla_parse: 39 callbacks suppressed [ 446.330543][T24288] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 446.795901][T24315] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 446.852563][T24315] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:16 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0200000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x90700000000000, 0x0, 0x0) 05:16:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x80) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x81a, 0x4, 0x1, 0x4}, {0x7f, 0x2, 0x4}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) dup3(r2, r1, 0x80000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:16 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0248cf", 0x1f) 05:16:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x183001, 0x0) bind$llc(r3, &(0x7f00000000c0)={0x1a, 0x303, 0x4, 0x5, 0x6, 0x10000, @remote}, 0x10) r4 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0x6}) 05:16:16 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000001600)='security.evm\x00', 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x5, {0x100000001}}, 0x18) capset(&(0x7f00000003c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "5d7d1a20ab65646cd863db44db121f5779d0b169"}, 0x15, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x400, 0x5, 0x2, 0x0, 0x4, 0x22820, 0x0, 0x5, 0x1, 0x0, 0x4, 0x0, 0xfee1, 0x3, 0xfffffffffffffffa, 0x2, 0x1, 0xffffffff, 0x1, 0x2, 0x8001, 0x0, 0x79e, 0x0, 0x7, 0xfffffffffffffffb, 0x1, 0x7, 0x0, 0x257, 0x101, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x5, 0x5, 0x7fffffff, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x9) clock_gettime(0x0, &(0x7f0000000280)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001680)={[], 0x9, 0xfff, 0x5, 0x5, 0x7}) close(r2) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2}}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000002000)=0xe8) bind$can_raw(r1, &(0x7f0000002040)={0x1d, r4}, 0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000000)={0xb, 0xe7}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 05:16:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x14030, &(0x7f00000003c0)={[{@metacopy_on='metacopy=on'}, {@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_off='xino=off'}, {@nfs_export_off='nfs_export=off'}], [{@euid_lt={'euid<', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x31}}, {@smackfstransmute={'smackfstransmute'}}, {@measure='measure'}]}) r3 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r5 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x8, 0x10001) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000004c0)={0x9, 0x30383653, 0x3, @stepwise={0x20, 0x6, 0x6, 0x22519a43, 0x6d1}}) sendfile(r4, r3, 0x0, 0x10001) [ 447.089030][T24328] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 447.107488][T24331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000000c0)={0x2b, 0x3}) fcntl$dupfd(r1, 0x0, r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockname$tipc(r0, &(0x7f0000000080), &(0x7f0000000100)=0x10) [ 447.158095][T24328] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 447.189188][T24331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:17 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca024ccf", 0x1f) 05:16:17 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0300000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xa0500000000000, 0x0, 0x0) 05:16:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x03\x00\x00') io_setup(0x2000000000009, &(0x7f0000000080)=0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0xb6, 0x20001000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) prctl$PR_SET_SECUREBITS(0x1c, 0x10) write$binfmt_misc(r2, &(0x7f00000001c0)={'syz1', "2338c94412751a8076d5a7adf180f28619e4e8c86af86034bc5f06bba0a5f3af65ee7f10eb1f3e4dabe75b0bacec6d26ecc181f2587233b118b38b4709a7718918c7ce9a14"}, 0x49) io_destroy(r1) [ 447.726729][T24375] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 447.754412][T24376] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x400) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 447.785158][T24382] validate_nla: 25 callbacks suppressed [ 447.785167][T24382] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 447.802020][T24376] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10020000006, &(0x7f0000000000)="c8d63f23", 0x61) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x880) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x80, 0x4) [ 447.897282][T24382] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:17 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0400000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 447.967061][T24392] input: syz0 as /devices/virtual/input/input1268 05:16:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 05:16:18 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0260cf", 0x1f) 05:16:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = getpgid(0x0) ptrace$getregset(0x4204, r1, 0x203, &(0x7f0000000140)={&(0x7f0000000080)=""/189, 0xbd}) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='m\xa0U\x17\x19\b\x16J\x8f\x9cB\f\xe2\xc5N\x1e\xc2\xdbnR\x8e\xe4!kemor\x18\xfb\xbcCents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000003bc0)=ANY=[], 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000200)={0x20, 0x6b0, 0x1}) 05:16:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001a40)=""/4096}, {&(0x7f0000000100)=""/11}, {&(0x7f0000000200)=""/52}, {&(0x7f0000000240)=""/207}, {&(0x7f0000000340)=""/87}, {&(0x7f0000001800)=""/226}, {&(0x7f0000001580)=""/66}]}}], 0x27b, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0xc) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:16:18 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0500000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 448.222099][T24420] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 448.257385][T24423] input: syz0 as /devices/virtual/input/input1269 05:16:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) [ 448.353695][T24432] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 448.429812][T24423] input: syz0 as /devices/virtual/input/input1270 05:16:18 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0600000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) sysinfo(0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @broadcast}, {0x0, @dev={[], 0xf}}, 0x4, {0x2, 0x4e21, @local}, 'team_slave_0\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x80) socket$isdn(0x22, 0x3, 0x26) 05:16:18 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0268cf", 0x1f) 05:16:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x100004000000000, 0x0, 0x0) 05:16:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) write(r0, &(0x7f0000000140)="2200000018007c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/fib_triestat\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) [ 448.709470][T24460] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:18 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0700000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 448.808212][ C1] net_ratelimit: 18 callbacks suppressed [ 448.808218][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.819740][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:18 executing program 1: r0 = open(&(0x7f00000000c0)='./file1\x00', 0x400000040140, 0x81) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) connect(r0, &(0x7f0000000280)=@rc={0x1f, {0xc5, 0x6, 0x8, 0x1ff, 0x200, 0x8}, 0x9}, 0x80) execveat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffaad4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x7, @vbi={0x201d8b77, 0x7, 0x3, 0x7d77775f, [0x10001, 0x8], [0x5, 0x7], 0x1}}) 05:16:18 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca026ccf", 0x1f) [ 448.993470][T24452] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:16:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x100008000000000, 0x0, 0x0) 05:16:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0800000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 449.128209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.134070][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 449.162380][T24496] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x1, 0x2) accept4$rose(r2, &(0x7f0000000440)=@full={0xb, @dev, @null, 0x0, [@null, @rose, @rose, @rose, @rose, @netrom]}, &(0x7f0000000480)=0x40, 0x800) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10040, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r3, r1, 0x9, 0x2}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x40080, 0x0) [ 449.298088][T24515] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x8, 0x0, 0x5, 0x80}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r2}, &(0x7f0000000600)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') tee(r3, r0, 0x5, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000640)={0x0, 0x6000, 0x1000, 0x2c64, 0x8}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2000000000002) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c179f8b026e1b1a4c49e670000000000000000000000000000000000000020000000000000000000000000000000000024876a0c18374927f9c49dd83000000000000000000000000000000000000041000000000000000000000000000000000000000000000000000000e346fe69e044298b68e3722dc3f89e355dfe87b6273d45f2a98443041980ba5f2f78c64795d4af"]], 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000400)) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0xb8, 0xa, 0x6, 0x0, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x8}, [@typed={0xa4, 0x49, @binary="b9655dac829fa0024eb6407f5bef79cc38bf36400e36099c212d277562082f26e7a6f4aefcfee934a71b036dd8012914c5014168c967d8be4bf0ed785ff151f852880faf9573adfd00cfddbc7ce7c5ff9ae312467819d4f79878861dd3dc28741750da09bb0706dfc9fab8ecb8248d99d800f01a654d052c798a8d3365c1a3b2f3780b95e203ca3cc799d92594f4756511b040a4f9878c0eaad9777b10"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4) fcntl$setstatus(r3, 0x4, 0x400) 05:16:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x668, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xd}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da8020000100000, 0x500001c) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x1, 0x100000000}, 'port1\x00', 0x44, 0x0, 0x80000001, 0x0, 0x7fffffff, 0x6df, 0x0, 0x0, 0x2, 0x6}) 05:16:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0a00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 449.448210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.454022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.459892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.465671][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:19 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0274cf", 0x1f) 05:16:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000000)={0x2, 0x3, @stop_pts=0x8}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) [ 449.605655][ T27] audit: type=1804 audit(1549170979.512:89): pid=24532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir965307962/syzkaller.OBYhXq/505/memory.events" dev="sda1" ino=16541 res=1 [ 449.612430][T24541] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0e00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x10000c000000000, 0x0, 0x0) [ 449.769199][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.775010][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000780)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x2, 0x2, 0x7}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x80}, 'port0\x00'}) [ 449.945722][T24563] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0f00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:20 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0xfffffffffffffe69) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = dup2(r0, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 05:16:20 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca027acf", 0x1f) 05:16:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x101000000000000, 0x0, 0x0) [ 450.290599][ T27] audit: type=1804 audit(1549170980.192:90): pid=24546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir965307962/syzkaller.OBYhXq/505/memory.events" dev="sda1" ino=16541 res=1 [ 450.400222][T24589] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 450.528982][ T27] audit: type=1804 audit(1549170980.262:91): pid=24546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir965307962/syzkaller.OBYhXq/505/memory.events" dev="sda1" ino=16541 res=1 05:16:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x8, 0x0, 0x5, 0x80}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r2}, &(0x7f0000000600)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') tee(r3, r0, 0x5, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000640)={0x0, 0x6000, 0x1000, 0x2c64, 0x8}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2000000000002) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c179f8b026e1b1a4c49e670000000000000000000000000000000000000020000000000000000000000000000000000024876a0c18374927f9c49dd83000000000000000000000000000000000000041000000000000000000000000000000000000000000000000000000e346fe69e044298b68e3722dc3f89e355dfe87b6273d45f2a98443041980ba5f2f78c64795d4af"]], 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000400)) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0xb8, 0xa, 0x6, 0x0, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x8}, [@typed={0xa4, 0x49, @binary="b9655dac829fa0024eb6407f5bef79cc38bf36400e36099c212d277562082f26e7a6f4aefcfee934a71b036dd8012914c5014168c967d8be4bf0ed785ff151f852880faf9573adfd00cfddbc7ce7c5ff9ae312467819d4f79878861dd3dc28741750da09bb0706dfc9fab8ecb8248d99d800f01a654d052c798a8d3365c1a3b2f3780b95e203ca3cc799d92594f4756511b040a4f9878c0eaad9777b10"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4) fcntl$setstatus(r3, 0x4, 0x400) 05:16:21 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x89e0, &(0x7f0000000180)={@remote, 0x0, @rose, @rose={'rose'}, 0x0, [@null, @remote, @null, @bcast, @netrom, @null, @rose, @rose]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 05:16:21 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f1000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:21 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xf) 05:16:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DISCONNECT(r0, 0xab04) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 05:16:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 451.384684][T24621] __nla_parse: 27 callbacks suppressed [ 451.384693][T24621] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 451.459274][T24631] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:21 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x1ffffffffffffff, 0x0) mount$9p_tcp(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES64]) [ 451.531980][T24621] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:21 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f4800000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:21 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x59) 05:16:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x400000000000000, 0x0, 0x0) 05:16:21 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000340)='\x91et/udp6\x00\xd3TK1\xa4\xe3%xw\xad\xff7T\x8eZ\xe3\x8c\xe7\x95u0\x8cI\xedYn\xd0SG\xf2\x9871\xad\x03n\x10\x87\x9d\xe5\xf2\x9c\x92\x9c\x03n\xb6,\xc8\xdb|\xaf\xa9\x82Yv\x9d\xca;\xdd\xcf\x9a\x80\xf6b\t\x85H\xce\xc1') ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x5, &(0x7f0000000240)=0x2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) move_pages(r2, 0x3, &(0x7f0000000180)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f00000002c0)=[0xfffffffffffffffa, 0x6, 0x5], &(0x7f0000000000)=[0x0, 0x0], 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x4014, 0x4) modify_ldt$read(0x0, &(0x7f0000000080)=""/78, 0x4e) getrandom(0x0, 0x19b, 0x3) [ 452.100878][T24664] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 452.117113][T24665] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 452.162792][T24665] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 452.202899][T24664] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f4c00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 452.494805][T24683] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 452.523220][T24683] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x8, 0x0, 0x5, 0x80}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r2}, &(0x7f0000000600)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') tee(r3, r0, 0x5, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000640)={0x0, 0x6000, 0x1000, 0x2c64, 0x8}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2000000000002) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c179f8b026e1b1a4c49e670000000000000000000000000000000000000020000000000000000000000000000000000024876a0c18374927f9c49dd83000000000000000000000000000000000000041000000000000000000000000000000000000000000000000000000e346fe69e044298b68e3722dc3f89e355dfe87b6273d45f2a98443041980ba5f2f78c64795d4af"]], 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000400)) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0xb8, 0xa, 0x6, 0x0, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x8}, [@typed={0xa4, 0x49, @binary="b9655dac829fa0024eb6407f5bef79cc38bf36400e36099c212d277562082f26e7a6f4aefcfee934a71b036dd8012914c5014168c967d8be4bf0ed785ff151f852880faf9573adfd00cfddbc7ce7c5ff9ae312467819d4f79878861dd3dc28741750da09bb0706dfc9fab8ecb8248d99d800f01a654d052c798a8d3365c1a3b2f3780b95e203ca3cc799d92594f4756511b040a4f9878c0eaad9777b10"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4) fcntl$setstatus(r3, 0x4, 0x400) 05:16:22 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xc0) 05:16:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000001400), r2, 0x7}}, 0x18) r3 = inotify_init1(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000340)=""/155) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001680)={0x2713, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) tkill(r5, 0x1000000000016) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20008000) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "424c5b817c93229fb8883e973b534f9d39f96e1ad90827299dac9cc498e651cd", 0x0, 0x8, 0x1, 0x5c, 0x8, 0x1, 0x873, 0x1000}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) 05:16:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0xfffff80000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x25}}, 0x2, 0x8}, 0x90) unshare(0x20000400) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/2, 0xd233dc1cb9b89ab7) 05:16:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x500000000000000, 0x0, 0x0) 05:16:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f6000000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 452.789641][T24697] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 452.833162][T24701] validate_nla: 2 callbacks suppressed [ 452.833170][T24701] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:22 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0xfffffffffffffff9, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000140), 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 452.907060][T24706] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f6800000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:23 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xec0) 05:16:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x600000000000000, 0x0, 0x0) 05:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1f}, 0x20, 0x2, 0x2, 0x1, 0x1, 0xff}, &(0x7f00000001c0)=0x20) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) [ 453.240941][T24729] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:23 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f6c00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 453.378425][T24737] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 453.929491][ C1] net_ratelimit: 22 callbacks suppressed [ 453.929539][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 453.941851][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x8, 0x0, 0x5, 0x80}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r2}, &(0x7f0000000600)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') tee(r3, r0, 0x5, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000640)={0x0, 0x6000, 0x1000, 0x2c64, 0x8}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2000000000002) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c179f8b026e1b1a4c49e670000000000000000000000000000000000000020000000000000000000000000000000000024876a0c18374927f9c49dd83000000000000000000000000000000000000041000000000000000000000000000000000000000000000000000000e346fe69e044298b68e3722dc3f89e355dfe87b6273d45f2a98443041980ba5f2f78c64795d4af"]], 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000400)) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0xb8, 0xa, 0x6, 0x0, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x8}, [@typed={0xa4, 0x49, @binary="b9655dac829fa0024eb6407f5bef79cc38bf36400e36099c212d277562082f26e7a6f4aefcfee934a71b036dd8012914c5014168c967d8be4bf0ed785ff151f852880faf9573adfd00cfddbc7ce7c5ff9ae312467819d4f79878861dd3dc28741750da09bb0706dfc9fab8ecb8248d99d800f01a654d052c798a8d3365c1a3b2f3780b95e203ca3cc799d92594f4756511b040a4f9878c0eaad9777b10"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4) fcntl$setstatus(r3, 0x4, 0x400) 05:16:24 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000040)='./file1\x00', 0x4000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000240)="21004002998681ff130200001204100000030100000206000001000084811f4ce10000001e001e00000000000010ec0302008100526549734572334673", 0x3d, 0x10000}], 0x0, 0x0) 05:16:24 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x800343, 0x20000000209, 0x0, 0xffffffffffffffff}) r3 = semget(0x0, 0x7, 0x8) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f00000000c0)=""/212) r4 = dup2(r1, r2) r5 = shmget$private(0x0, 0x1000, 0x7c000180, &(0x7f0000ffd000/0x1000)=nil) r6 = getuid() getresgid(&(0x7f0000000040)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) r8 = getuid() fstat(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r4, 0x0, 0x2, &(0x7f0000000340)=',\x00', 0xffffffffffffffff}, 0x30) shmctl$IPC_SET(r5, 0x1, &(0x7f00000003c0)={{0xffffffffffffff80, r6, r7, r8, r9, 0x182, 0x7}, 0x1000, 0x20, 0x100000000, 0x0, r10, r11, 0x3ff}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 05:16:24 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7400000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x700000000000000, 0x0, 0x0) 05:16:24 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xfdef) [ 454.391803][T24772] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6c, 0x40000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) 05:16:24 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7a00000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 454.483201][T24781] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:24 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xff00000000000000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0xc0045520, &(0x7f0000000080)) [ 454.568242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.574063][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:24 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x33fe0) 05:16:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x700008000000000, 0x0, 0x0) 05:16:24 executing program 4: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x98000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x3, @rand_addr="2b5472df64d59bdbb3dc60b420965e2d", 0x1000}}, [0x658, 0x8, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x2, 0x80, 0x8, 0x2, 0x6, 0xcc7, 0x101, 0xfffffffffffffffc, 0x991, 0x6]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x7f, 0x8000, 0x8, 0x80000001, 0x2, 0x5, 0x20, 0xffffffffffffffff, r1}, 0x20) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open$dir(&(0x7f0000000040)='./file0\x00', 0x600, 0x0) [ 454.774520][T24809] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 454.855559][T24813] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 454.929686][T24817] overlayfs: './file0' not a directory [ 455.048237][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.054058][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.369272][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.375811][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.688255][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.694087][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x5, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TIOCCONS(r1, 0x541d) 05:16:25 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0003000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:25 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000cc0)) ftruncate(r0, 0x208200) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="ff521b570afb12f3b80eb808d0560481", 0x10) getresgid(0x0, 0x0, &(0x7f0000000900)) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0xfe) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x7ffffe, 0x4002011, r2, 0x0) 05:16:25 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x2000005f) 05:16:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x2) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a83a8d91834d463ae366695560c35a2c9482c3c8c517ad2aa57e582f5e4531151b286fac939490f367dee65a7d7bb51ba560f75894821242f4323cfebe42eda75dd16eb490152464e8380ad22a4a2d080e62febee6397a7601fc60b434eddc1322703bd3f3cc4351d56cd6b9313d2b7d1f610f85ba11f4cbfbd6149decf70ff571ca9643981875909df70844d4461dc755c33ab4", 0x94}, {&(0x7f0000000200)="27135b8435e159f14261eedb0e3a804a6b04b68d4b55976f604a2e49b0a55a2ff4924fb9a80427a10707dfdcc558a6cc452d564dc9698957f9a7935f4bc453fe7e4d1e12a97bd60d517d7285fef4d1527d28b7b5f7b80e16adc07d5ad2e784b8e0e1c35a477cb23df4af128dd6662035b63ee567f8db45bae0a0944c2d5e38f7ead4f8be9f7a519cd07951e6530f52931c35fb8eda7e457928b69ad5dbfea7a0aaf8df312d4fb6ad309d1abb1399", 0xae}, {&(0x7f0000000040)="67ec2c2e6cd63b75b295dd1d308f1bbb33bda16b23d196e20ac8cc77c670c3185da4275800bd1c174a6d", 0x2a}, {&(0x7f00000002c0)="aaf92d16a9da453527d483faf959a41ad355b7933569358a71590eb413f6ebb6777d4a2b79aae5a48967b325821e6bdde22f6128a1192432ac24af70699b39f977d625850fb23943f83a7429115bdeb594523afebf477a2026e2cd6dbd0e10df1e4c81c899a627542e31d7f10581a5e99c0f91bedf6413a6d58f9cdcc6c7cff848d99dfc00e0393f8663879f0d65db67d0ad19a2848cbcdb5b39e54c0554d1a565af19238673304585d233a182ee588a6133bd814160610745269bbe3dbc4a1aab6e6970ce3834d2feb8f80db087539a98", 0xd1}, {&(0x7f00000003c0)="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", 0xfa}], 0x5) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x98000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mixer\x00', 0x2400, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000580)={r0, 0x100000001, 0x40, r2}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="d08ee36d488dc94da98c79c0e15a0c5c02fbc6976d68a367cad4", 0x1a}], 0x1) 05:16:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x800008000000000, 0x0, 0x0) [ 455.852433][ T27] audit: type=1804 audit(1549170985.762:92): pid=24848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/bus" dev="ramfs" ino=102531 res=1 05:16:25 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xfffffdef) 05:16:25 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r2) read(r1, &(0x7f00000003c0)=""/85, 0xffc3) connect$rds(r2, 0x0, 0x0) times(&(0x7f0000000080)) [ 455.966029][ T27] audit: type=1804 audit(1549170985.762:93): pid=24848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/bus" dev="ramfs" ino=102531 res=1 05:16:25 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0005000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge_slave_1\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_mtu(r1, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x8, 0xc9a, 0xe37, 0x1f}) 05:16:26 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xfffffffffffffdef) 05:16:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x900000000000000, 0x0, 0x0) [ 456.192948][ T27] audit: type=1804 audit(1549170985.762:94): pid=24848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/bus" dev="ramfs" ino=102531 res=1 05:16:26 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r2) read(r1, &(0x7f00000003c0)=""/85, 0xffc3) connect$rds(r2, 0x0, 0x0) times(&(0x7f0000000080)) 05:16:26 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0006000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 456.651399][ T27] audit: type=1804 audit(1549170986.562:95): pid=24912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/file0/bus" dev="ramfs" ino=102816 res=1 [ 456.752193][ T27] audit: type=1804 audit(1549170986.592:96): pid=24912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/file0/bus" dev="ramfs" ino=102816 res=1 05:16:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)) openat$cgroup_int(r2, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) 05:16:26 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0) 05:16:26 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f9906000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:26 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ff17000000ff000000000000080671dab56d0653d5c4000000000900e000000193e3ceb3d3a1ac14140098f59db41d1a4dc2b64873e7ed81f3402ec033d9a987bc1f8038eb9687a40f42014f3f2883bc2aa8edf1738c8e452df40f0c87cf033bcbedc17f1af12cbf1e99019fd41a69bc4e1c7716590c6241acce542d14bb8b3ac61fb545c6bba44382c8ca773987543814b9ac7d166e5b1e4693f020debc85bfa2e54c0556477253e1a3b410d2"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10400, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x6, 0x7fffffff, 0x6, 'queue1\x00', 0x8001}) 05:16:26 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r2) read(r1, &(0x7f00000003c0)=""/85, 0xffc3) connect$rds(r2, 0x0, 0x0) times(&(0x7f0000000080)) [ 456.867413][T24920] __nla_parse: 28 callbacks suppressed [ 456.867423][T24920] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 456.892866][ T27] audit: type=1804 audit(1549170986.592:97): pid=24913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/477/file0/bus" dev="ramfs" ino=102531 res=1 [ 456.927573][T24926] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 456.958455][T24931] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000061129800000000009500000000f80000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 05:16:26 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r2) read(r1, &(0x7f00000003c0)=""/85, 0xffc3) connect$rds(r2, 0x0, 0x0) times(&(0x7f0000000080)) [ 456.995608][T24926] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 457.027241][T24920] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 457.027411][T24931] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:27 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x3, 0x40080) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000500)={[{0x1, 0x6103518d, 0x20, 0x9, 0x7fff, 0xc8, 0xffff, 0x8b2, 0x7, 0x0, 0xfff, 0x1eee4000000}, {0x7, 0x7, 0x1ff, 0x2, 0xdba, 0x100000000, 0x4, 0xffffffffb6320742, 0x5, 0xffffffff, 0x8, 0xa68}, {0x7, 0x9, 0x9, 0x0, 0x800, 0x7fff, 0x81, 0x4459, 0x2, 0x9, 0x6, 0x400, 0x4}], 0x3}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000240)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000580)={0x4d, 0x4, 0x0, "8f714fe7cede464d0136f08f12ec26852098ded580ddb215fb14d3011c0b6685bf9b154d4f47dffa2de138cd4466775c3762e849fe3b63ddbdf39299951b16417fd1d6094e0ef4728b38194122"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000780)={{0xcab}, {}, 0x0, 0x4}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000380)={0x0, 0x9, 0x0, 0xce4e, 0x0, 0x6}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) mkdir(&(0x7f0000000740)='./file0\x00', 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5790, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000600)={0x0, "33735aeb4accf5ff65bbb376c2a96829298c381486a37a03d4574ce0a7293060", 0xc10, 0xa, 0x2, 0x4, 0x15}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x108088}, 0xc, &(0x7f00000006c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="34ac0400000c2f47b1069fac08328b1fdc5333a55f5959df577060a87fbb8cf26da7", @ANYRES16=r4, @ANYBLOB="000029bd7000ffdbdf25090000009800040024000700080003004000000008000300f7ffffff080003000100000008000300000000001c0007000800020007000000080001001400000008000400090000005400070008000400586d455d080004000000000008000100050000000800020008000000080001000a000000080002001f0000000800010018000000080002000200000008000400090000000800040000000000"], 0xac}}, 0x4000) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0x15, &(0x7f00000000c0)='md5sumppp1em0(system\x00'}, 0x30) ptrace$getenv(0x4201, r5, 0xff, &(0x7f00000001c0)) write$FUSE_LSEEK(r2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'veth1_to_bridge\x00', {0x2, 0x4e22, @remote}}) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200) link(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') 05:16:27 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0007000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000137cdf4d4f6e93841c00000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000050002b004c00030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff07110e66fa905150f8a9c7ff0000"], 0x70}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0xb3}}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x308, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) [ 457.257731][T24946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 05:16:27 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfffffffffffffffc, 0x80000001, 0x4}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0) [ 457.300777][T24953] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:27 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 05:16:27 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000a000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 457.478434][T24967] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x602, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xa00000, 0x0, 0x200, [], &(0x7f0000000100)={0x990964, 0x3, [], @value64=0x3}}) [ 457.551374][T24978] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 457.592602][T24980] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000000300000000000020010000200100002001000020010000680200006802000068020000680200006802000003000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80020010000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020100000001000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000180000000000000ffffffff00000200ffffffff000000006e72300000000000000000000000000069703667726530000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000010002240000000000000000000000000000e80048010000000000000000000000000000000000000000000000002000736f636b65740000000000000000000000000000000000000000000000003000636c757374657200000000000000000000000000000000000000000000000000000000020000789f000001000000600053455400000000000000000000000000000000000000000000000000000020000000540900000900000008000000000000003805000000000000ff0800000600000006000000fbffffff2608000005000000010001000000008001ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x360) r1 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)='D', 0x1) 05:16:27 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000001c0)="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", 0x189) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:27 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000e000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0) [ 457.822320][T25004] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 457.824205][T25006] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 457.895839][T25012] validate_nla: 2 callbacks suppressed [ 457.895849][T25012] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 457.996080][T25020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 05:16:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) recvfrom$netrom(r0, &(0x7f00000000c0)=""/133, 0x85, 0x10000, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) move_pages(0x0, 0x49c, &(0x7f0000000080)=[&(0x7f000001b000/0x2000)=nil, &(0x7f000001a000/0x1000)=nil], &(0x7f0000001380), &(0x7f0000000140), 0x0) 05:16:28 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x200800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="2626f2dad1f3f40f0766baf80cb8e94d9680ef66bafc0cecc4c37d09b100080000c0660f01c8c4e19dd81b0f090f01746c4d66b8eb000f00d8", 0x39}], 0x1, 0x4, &(0x7f0000000200)=[@cr0={0x0, 0x40009}], 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000240)=0x5) r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454dcb13ccd05e0000000003008a2300000000000000"], 0x17) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f00000000c0)=0x1f, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000080)={0x1, 0x0, 0x7, 0xfffffffffffffff7, 0x2}) 05:16:28 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000f000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x73) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000005726168e4a49276d81c32f260d4e6afc6c23d09bd47f75185ef8ca5c20f3d0b7b111604aa32facfdbdb41c551a3e50953a17a30e6b58eb32dca2a02513a2fee6682d2bdeb7a3e4d5abf97c2a9fbf8e65362fc0fd24c9dc61e49d8016b1803082503f1832ee53103327dea3e85e0d6e8b30010c69aa01d04e66ea5021cac507ad45852f957bfc43aab56c70988df0af3d8688d210d5cc18560a732f44954e578f61b11705464e"], 0x28}}, 0x0) 05:16:28 executing program 2: r0 = socket(0x10, 0x2, 0xc) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xfffffe7f) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) write(r0, &(0x7f0000000180)="17000000f305010000cf0000000000000000000000000007e469de7786d93d8ac061acf0abeced3bbe85127e0865890bf07389a10b86b90ae88daf9ceff72c4c5da1c4220929ddca27b3c6f99f3938d87a035cc31fe819e2b56348d041c96da90aafe7b6b14ea7fec72f5fae710231b836be0f611c7b58ed4c990879d8bbc707463c415dad3c1d0bff648d3c3197222c6de21bb73ae1110733b52e0c12bbb90b661314f8c774d364ce7a542bd76d2d676ad1287219735bea76", 0xfffffffffffffc2e) 05:16:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0) 05:16:28 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) 05:16:28 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0020000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 458.441591][T25054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 458.521569][T25060] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="92ef26fa52248d67d9c17a7cf1e6dbce41570a1f25185a519bd8ed4f339cb4c62062e0e7741f9f9d1a1662d259145090308c20f6f4df016b60a584ad0cedd2fadb2481dc31ca5f1b1428bdb540fa74e5b0e0feee93ec73adc3a4a2711a69b1f10f5848334e16730d11d1a9d31878aaa39dc9385c5f9992fc1f2f96ab0e90") r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0xfffffffffffffe5e, [], 0x1000024e, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 05:16:28 executing program 4: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4800002, 0x4831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open$cgroup(0x0, r0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1d, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x13f000}], 0x1, 0x0) [ 458.619630][T25065] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:28 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f003f000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 458.682816][T25069] kernel msg: ebtables bug: please report to author: Wrong size [ 458.790779][T25077] kernel msg: ebtables bug: please report to author: Wrong size 05:16:28 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xffffffffffffff30) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x6b, 0x4509, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 05:16:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1900008000000000, 0x0, 0x0) 05:16:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0xfd13) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@local, r5}, 0x14) read(r1, &(0x7f00000002c0)=""/169, 0xa9) getsockname$tipc(r2, &(0x7f0000000140)=@id, &(0x7f00000001c0)=0x10) syz_open_dev$mouse(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) 05:16:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0040000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 459.203596][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.208239][ C1] net_ratelimit: 18 callbacks suppressed [ 459.208246][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.222414][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.226662][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.341585][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.422294][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.491748][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.528226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.534109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.562414][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.606257][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.649471][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:16:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0048000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:29 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 05:16:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1a00008000000000, 0x0, 0x0) 05:16:29 executing program 4: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4800002, 0x4831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open$cgroup(0x0, r0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1d, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x13f000}], 0x1, 0x0) 05:16:29 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) setresuid(r0, r1, r2) socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={0x0, &(0x7f0000002bc0)=""/4096, 0x100000, 0x1000, 0x1}, 0x20) [ 459.701398][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.774383][T25139] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 459.783401][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:16:29 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f004c000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 459.833904][ T12] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 459.847381][T25142] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 459.858223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.864073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 459.869930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.875783][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xffffffffffffff63}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 459.931662][ T12] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 05:16:30 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x400, 0xfffffffffffffffe, 0x4}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0xfd13) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@local, r5}, 0x14) read(r1, &(0x7f00000002c0)=""/169, 0xa9) getsockname$tipc(r2, &(0x7f0000000140)=@id, &(0x7f00000001c0)=0x10) syz_open_dev$mouse(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) 05:16:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x1d00008000000000, 0x0, 0x0) [ 460.168219][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 460.174096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 460.201149][T25166] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:30 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0060000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:30 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) close(r0) [ 460.340348][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 460.347912][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 460.357396][T25178] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:30 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0068000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 460.525792][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/57, 0x39}], 0x1, &(0x7f0000000480)=""/183, 0xb7}, 0xb8b}], 0x1, 0x102, &(0x7f0000000580)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000bc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001540)={'vcan0\x00', 0x0}) accept$packet(r0, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000015c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001600)={0x0, @loopback, @multicast1}, &(0x7f0000001640)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40812044}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x358, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0xa13, 0x7, 0x0, 0x4}, {0x100, 0x4, 0x7}, {0x4, 0x5, 0x1, 0x80000000}, {0x100, 0x400, 0xfff, 0xfffffffffffff4b8}, {0x3, 0x9308, 0x31, 0xfff}, {0xfb5, 0x1, 0x17bf}, {0x1, 0x40, 0x7, 0x1ff}, {0x8, 0x1, 0x3, 0x8819}, {0x9, 0x1000, 0x8, 0x5b747621}, {0x200, 0x80, 0xe44f, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffc}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x66901c8a}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x8010}, 0x4) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r10 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7fff, 0x20002) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='nodev\x00', r10}, 0x10) write(r11, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 460.586859][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 460.661081][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 460.728268][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f006c000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 460.771162][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = eventfd2(0x0, 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, 0x0, 0x0) read$eventfd(r2, 0x0, 0x0) [ 460.834217][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 2: r0 = socket(0x10, 0x2, 0xc) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480040, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x3, 0x4) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x3}) [ 460.897268][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0074000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 460.942243][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:16:30 executing program 4: r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x54222400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001a00)={0x201, @tick, 0x0, {0x7ff, 0x7}, 0x8, 0x1, 0x10001}) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000100)=0x9) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000700)={0x3d, 0x0, 0x401, 0x2, 0x3, @stepwise={{}, {0x86}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) signalfd(r2, &(0x7f0000000680)={0x5}, 0x8) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000002c0)={{0x3, @addr=0x1000}, 0x8, 0x7ff, 0x6}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$packet_buf(r5, 0x107, 0x0, &(0x7f00000003c0)=""/190, &(0x7f0000000200)=0xbe) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x55f) accept4$llc(r2, 0x0, &(0x7f0000000280), 0x80800) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x6d0, 0x7fff, 0x4, 0x3}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)}], 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000880)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x5, 0x3, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000480)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000640)=',/*mime_type\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', 0x0, &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', 0x0]) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r7) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x30, 0x8001, 0x400}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000040)={0x1, {0x0, 0x989680}, 0xeb83, 0x20}) r8 = fcntl$getown(r6, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r8) [ 461.002619][T25218] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 461.004595][ T12] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 461.071310][T25223] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:31 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f007a000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 461.125449][ T12] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 05:16:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0xfd13) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@local, r5}, 0x14) read(r1, &(0x7f00000002c0)=""/169, 0xa9) getsockname$tipc(r2, &(0x7f0000000140)=@id, &(0x7f00000001c0)=0x10) syz_open_dev$mouse(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) 05:16:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0) 05:16:31 executing program 2: r0 = socket(0xf, 0xfffffffffffffffe, 0x7) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) r1 = gettid() process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/253, 0xfd}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/154, 0x9a}], 0x6, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000000)) sendto$rxrpc(r0, &(0x7f00000000c0)="20b5d4db06a183be272acd82b2708a6bc420107bb44dec446176bd745181aa850d5574b7b75c4df9", 0x28, 0x20000000, &(0x7f0000000840)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000000000000000}}, 0x24) 05:16:31 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0699000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 461.353859][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 461.421811][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 461.463456][ T8438] rpcbind: RPC call returned error 22 [ 461.493052][T25256] usb usb3: usbfs: process 25256 (syz-executor1) did not claim interface 0 before use [ 461.504262][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 05:16:31 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) read$alg(r0, &(0x7f0000000080)=""/49, 0x31) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) 05:16:31 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000204fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 461.570504][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 461.587229][T25256] usb usb3: usbfs: process 25256 (syz-executor1) did not claim interface 0 before use [ 461.614353][T25229] IPVS: ftp: loaded support on port[0] = 21 [ 461.654597][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 05:16:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x7ff, "a0fa2c5d72b498e94b88d443e9c097c12e671be8203f28d4c4236653b16847aa", 0x100, 0xfffffffffffff001, 0x8, 0x4}) fchdir(r0) r2 = getpgrp(0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x5, 0x0, r2}) acct(0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) [ 461.707144][T25272] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 461.740721][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 05:16:31 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000304fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 461.805947][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 05:16:31 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000, 0x80000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001080)={0x2, 0x1, [0x0, 0x8, 0x3, 0xd111, 0x100, 0xffffffff, 0xfffffffffffff3a1, 0x8]}) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) pwrite64(r0, &(0x7f0000000080)="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", 0x1000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000010c0)) [ 461.886607][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 461.934294][T25288] __nla_parse: 41 callbacks suppressed [ 461.934303][T25288] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 461.943215][ T64] rpcbind: RPC call returned error 22 [ 461.962221][T25246] IPVS: ftp: loaded support on port[0] = 21 [ 461.965194][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 461.998550][T25290] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 462.023372][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 462.034323][T25288] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 462.057979][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 462.067112][T25294] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 462.105801][ T22] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 05:16:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 05:16:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000001b40)="96", 0x1}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f00000013c0)="453a84451630a8eac62a8168e8034da7dfeed9bfe971d9f828528b4cde4d4a178aad7abd9b77ac034b744b29bd298ba42ac0008b2cf695ba26cf44ec8833e1", 0x3f}], 0x1, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x6}, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, 0xb) splice(r0, 0x0, r3, 0x0, 0xff, 0x0) 05:16:33 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1fffffff1f04fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:33 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x480) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200), 0xffffffd1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="b09451001808db27dce4fb3b85dd77c9f1ef9c68e395b5d3b3292237b10e4dfad2460fa2d325470152bdbdb5570084ac6389e641d10a334982ef5d3d23c2cc158870ec76f77919eb9f740731ccff49869898f42c0c8c6ab97524b315a320ef9816b9902aa9fb69b2323e18889c114ffe48132fb692b97ff2a54558420c975d75a21b97f6d3ee43d1053e3153881c0e4583daee9da98c95d0a8e5e075067eb0f7cc509b3420ca447a463a5ce2c472e9a0cdcc94e8ec486408abc610cd57fa0b290680bd26131058642f8f222a4f8309b7a721becf4878c189054e2a626e8b35ed9e8a54a09a") 05:16:33 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) fcntl$setsig(r0, 0xa, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 05:16:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0) [ 463.842182][T25312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 463.869178][T25318] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 463.890975][T25312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 463.913940][T25318] validate_nla: 3 callbacks suppressed [ 463.913949][T25318] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:33 executing program 4: 05:16:33 executing program 3: 05:16:33 executing program 1: 05:16:33 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000022304fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 463.959354][T25318] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 463.975983][T25327] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:34 executing program 4: 05:16:34 executing program 3: 05:16:34 executing program 1: 05:16:34 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cgroup\x00', r1}, 0x10) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 05:16:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x5000000000000000, 0x0, 0x0) [ 464.156444][T25343] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 464.182291][T25349] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:34 executing program 4: 05:16:34 executing program 3: 05:16:34 executing program 1: [ 464.246110][T25358] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 464.328298][ C1] net_ratelimit: 22 callbacks suppressed [ 464.328307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.339782][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:34 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000002504fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:34 executing program 4: [ 464.373799][T25349] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:34 executing program 3: 05:16:34 executing program 1: 05:16:34 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xfffffffffffff057, 0x4) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3bdb0007110000f30501000b000400020423b49c381446d0a328cb78b6f5de1d41ccca7cd8d2960884a8321ab4d19e6f9b43c5effc00000000004df14e053807f92bc45f8f130ae83190bdc3253102d99abf4ccfda8216bd09b87bb4d015383d11d3a86b90c5e2fb9cc71d45b5462bbea2526624d0e1ffffbfffffffff7fd0500f3c0000000000000000000000", 0xfffffffffffffe59) 05:16:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0) 05:16:34 executing program 4: 05:16:34 executing program 3: 05:16:34 executing program 1: 05:16:34 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000003f04fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="8806661625f5d8273ba4eae3b4a52e9b"}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}]}, 0x64}}, 0x20008080) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:34 executing program 1: 05:16:34 executing program 4: 05:16:34 executing program 3: 05:16:34 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000004004fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 464.900926][T25412] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:34 executing program 4: 05:16:34 executing program 1: [ 464.968218][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.974102][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.048665][T25412] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xf6ffffff00000000, 0x0, 0x0) 05:16:35 executing program 3: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00') setns(r0, 0x0) 05:16:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000010000006cffff00000000009500000000000000"], 0x0, 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 05:16:35 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x0, "3bc6526451172e092b683d0dec3266ff4073319fd5194a6cd4305707db6d18c7", 0x0, 0x80000001, 0xffffffffffffff01, 0x2000, 0xa}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mlockall(0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000340)=0x5) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 05:16:35 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 05:16:35 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000005904fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 465.303275][T25444] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2801, 0x100004c}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x3f00000000000000}}]}]}, 0x2c}}, 0x0) [ 465.402614][T25450] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) mmap$perf(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 05:16:35 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7ffffff204fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 465.448211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.454028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.527282][T25457] netlink: set zone limit has 4 unknown bytes 05:16:35 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000104ff00fd4344c00400000c00000000080001000146d4045ae6f04783cfccaa9a5bbdffdf0008000000f385996a8cfa0a309e84d9614bc3cfabd2d055b8b518ee17ab3752da274b6012bb76abf479125abf7ed30c50ee82e565b1b1de028839d6c13793548367512f5ae13175d061e5afc02c9c1ab4232ba6dc6564ebebe7", 0x35) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000002500)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000001f00000000001000007c0615a4ec58bc6a0df49026ef58e6ca9a2c0becb47fefd93518f941412fec178389381cf190aaf6320ce6b3ba61a51ae9a4fdb54416aabd14e139342fe8aadec0926e701a265410bb0ef9321cbc98bf9beec1e9054c00957655d7179a84c630aa8485d37c44d0a6e2fe4e95f5ac9eb8de29e24bdf50dc012df09d6cfdebaee4ec390a66be7f9d29c3c9aea4275cf69800f2b35be0c2d1e6fb51f72e4e47015d830831ee7a41964b5756a18f467226bfa8835059b71d9afceb4a41a9a6007553a07cdb33f1dd0b8cc98ecc214e30c93752a63b98bfff306d777c54da9f8f023b1e85910ef519b6812b60aead4091ba9e292b03bd1066087aa97c244c672875ec1852f10167c23cc586b74fb798829c77351bc8c9ca85d88dbb1d308eb497176e8c4f1dbf8cc200a932f4a6ceece5f62afc6ac84374ad6b197e566a4ddff1c0215f9dfcfb8d4a06c8f98ba86ddd1bc708481a0d2340305e9281c9218580c00bb5ad9f687348a7fa3bc858ed130cdcc3e484b6bc8dcda708d627ee2db549b224bbc3f0b18bc7bf2c1aca86492f295cc7bc17a62996f2655c6697f1c8b3b8ed227733f40fc745f66b33a30d415490bb11f7d5c7eb6a3992beab8b7b9d6c6e69e1e2926d56b33cc0f86f39ee706c579db699bf183c089e7d1cbc15d0f4e2474308f172f7901f4c642dcc63242244d0249cf5c7abd5a0f608f88d69a8dcbc23577aec4ac6ee56db337fbbb4ce7af3a706f75357b000081df58bb3a7e37e328f82cfe324ba4d4cb16601e095b5bae6f73069cd25182e7a7dac53be7740ef14aa518ca7c10eb72493e4a8d56a225102fce80e754a42be09f127121bc54aff5afca303440f5ebffa7bfc9b6c8612f011de678aa6e1b98c1cf338802f53c19a2e43f8f3466dbdd2ae1d779e3ae20ea1e716efcc0e5fc0a6f6a1727d41fb04ba7817d33a884e851644bc467617759123e47050adbe48c4d89548a172df3d66f4de1413458be2887b24dcd957ebbc7b5b9b67ae0a38a0a9da1193180d21c00b75b9360418c1255fd75b6d570682a3d3ca7ffa873ca6df86c3751b3f3ddb08e4265270e21e4b281d5b53708cd1811ffef99a4fe28d5350e30b37221e493564d4a5593c83548bf7d4f33c160db417226f9a20a574752f6b05f67720f41c5997d032e4f2e5288254417305cd6259b9218a5f5290def914b50d11405a75f96c8753b6272494342e7f1f26ed2fa565f0b5d2c5ccc78a9b5f51518f6fb92a72d427c73b4425cb2eec98d2140198dc981a395fd728897f538a5689b6a0a4a8f5d617f6ff7818dff4e2b324f98f86143923f0b13500465b89911c914d5b80d9d7112bab5cbc3340a83a76cca4719793dfdb83a25ca856741bd8f7e19616a4a57c055a5dce6827bb0d80533b758f31b89c3c707337e8680fb7e05f8ed68f5b453dc8e4b0bc0080f630328baba80684ca1fc29949fc607160e4a23ed04e772d0961b50ffdf3ed97674d51ee365fafe32b9ec857e7e963d3e2a038dfcc8177a58c002ba990c64e5d656ce469597562cfbeabb519b00d3b826f01e5972536564c106b4b2b191b7e9ff40cc578da2f56107f12ef343328571d2c8cc19827fcd2108720513a7cc11ba7fa09561320cb8216bf22c52bd8c844611a57e1937c5047911aab7c3ff32fb7f130bee447bb449d98d511c3fb302479f6c433b359f3140e3ad8a0e0e5ff685a932b035ffc3fe3505869e84c5b6e6966ae5a52c300c1ccfe6e3a9623eae2625624530f875f09d1a8f40c3022e714e9eb5c5f3b3dd314d5a4d22aace3a92d45e506e0adf1c36d30bea64b124b28a557b2a1f274712e9066211e5704a8111f5f411db8d7fc18cff433e77db71f1b03db0700ddf230d96a5b3b893b175b44b2825012de1a41e1badd1490b2aec0361f49fc527527924340b5e3bad6404e88e33007c3be16e16b5b9a529689ec732f526b8c60bd4035e3d32da0e3e20032ed2dcd7839aa80dda5a35e1ef1599f42c1d59d678f1d2a755c0998eb773319b9965ebcba298a9cac2307811ea9ead3cd069e46bf95eb4574f159fb9e1291419917b257480d2af3b2d3fb8a0854580ce7f2aacb30e52e8a55b18bae9c7aca3d0f1397b28e31dc47eb9515c264da07553e57cf82c20aebd577de661116aa7650eae24718e68c01ca5041ef62cda45bb80c4e9c94df2e8c418f71c98311c9b1987d5c3df784618af34a2deb3ed202feb5fd33884a6dc8b6b53891cfdeafe598d86382127de96c03c20e5e456b4ff98cf4257787ce7b9aea5fc9bf79cfb84a3859cd7b9371f31fcaf283a8b23eec4739aeda98da978544a268a86154b1b9d2c75bf83efb71223f03f3ae0e2f6b428311cc81ab5719d691a15adae260a9261b04abf28449d28723facdfc0193ced26c67a922e8336aa3993f2a2b6f33d1595ecd2f1535ffe6211de6b4a1b1bd4e20af0c1d258076cd3f0975759aec8bd9cf53f1cbd4f002d275c6732aef859d757c0ec55c9c9069e7dcdc14a889bedb67e65c547f868394c3b279fc1c945c262155b3424c62aedd773d5f83c6fd039be376dcde3459ed339bfd3ac2b744ee6e086661221a80cab7ac60ea0fe5460d2eac0ad070394b201d6aacc4ec0ac5c0f0d8af57d9a40886692666d4c862fe4b325a40f4ccb7a00921b51361a1ca0dbb83e70076f0836b18a338c8a6c1bd66f4d643a40d6590b382aaf9f7c6615b3fa47924a6ecba4513bacf9c1591015daac7e850de94e38b1859ff4c2a40e0e5dfe899c67e0c4de3dcef0a9c27a380741bc41a873aabb759b3bb681b84766ff48e45d483b5263dea7071179aab5dfd400cda8f6babf4561c88655251ae7ea3f4d794907cc093ee1e576ea39ab74320f578922f38ed444b6a16b2d86fdc56905464e1a70d6885f8755627c7a496069e4535e2e2e904063e53538a330a720fe761084e7f1df3c6d48efcc58fce866daeb9b0d61cc4ba907dfdaea1dd672d1ff142999ffab702dced578fde4f5fef1cec2d31a2436f6fab778f1ba3e075989a64e82bd2078326a8c487509f50b3679f19a4edadfffe9cadd9053d9e01e39fa2303cd63e94b1b10e6ee0a90f289a53990bea5133a846a3c262c43bcc18c2ae7c9aec0e8228093ec51ec72595436c50ec4e3e2b4a3893537232c56aaa6ba586876c3feeeb7c64c0947832ec24ae87e577f917a7cc321bbd6301d6c408f65b3d14055e95be93613307ed9518fa879155a12cb22442d7148e8d149a757145343c121d035521b84a3d9936d0b3e83afb69a95292e833b3137512a8e0a8c0ca61e3c0310d79063b40b6341b74533aac50f027b0981e566e2f2a11eb5504c9059944fb079a4589a56fb685646e008016a4da580f76df0e1c087c5e797dc177ba2b7398a5ab0899899fc3ef32fb24df565a72b42ec10e4d27bac6720a7264c7dcaf362e9d1c40d023dbdcd106c638d99b3ba557e71fabdfa4f6d3cb8f3898557012aa39e01819fe5579b6dc0e83e2a67adcafb8425bdde73280e3e3cea4314bfb1834b2eb9970868b2d600a133be620becd46519427c2d6ebf35544ff91d625ed5549a2deeeeeea713f804e168480be00bdbd9853a9d8b964801b781b05ef1747b1d235870c9bbd085520dc70f189800d6cd8bc08000000a9f3f6f4f2ea8c1c03be71d99de1d8bcb7693ab3fd1952c05b76bee0013ee70872e7350d50a4d9a58c5ace941c882dafd32fc2192f43c3a864bddc64f07f2c74c293b401f07a20d8f0f2fa6bad7358861c858e74d4d0a4881b503111ddda8dea838ea60142868557e9c8695a15360f8e6b1b819b000738f496621de4e74df35c95dd6c5aceb5681640c85b969980bfa596a7d3c0231e16e7b45f2f976612bb5c6dae242e6b2a27c21c137614a06e2de46b5828a76a1e4382ffd947708427da390f51d9e8035e70768e6a6657879c02c324a8a1febf41ee558d2f2197311402e31252519981ae3a5784622c01c3a3453940409a3284979e2074b256d3515bc852a1db9bf52594f344fb752443d569876e27df0e3ba4e9356bf145ae0ad774cd3b89c221491b988ac33f97fd7b69a6ef22a3689e6137e1fbfb4640ca04c362bdd7b3a5b408dca0cffa6746a1e5bfff2cebd2a3635bd4599c4dfe95a70c9a919837557d906feafe11631f56e1c92b3ac2c17695c031a8d9f01af2348d7ebd952d6df105d03d8dda5e247f2dd798cb4b63d0c8ce367eba1b216a0d798fdcae12064c3ee495d11328f8d4426eac44fc309d562a90097d1c8ec7a4d5afbb549f32cb331acee520323591556a97a96b4c61f8e100472b7523a9b55796394a0a4d5b6891fcbcfe11106a7acf6da62e6010e8f11167f4f8cc753067b9498abae539e100b166dc8e87fb5ac26be5876cbe4b10372aad8600fd04fc90ed8c1359df301f4a58c2e4c00a812207d831de6d185161fc851e0a279280e51309178307e1fdd359e43e2dc83c25c175b45c56332fb74ad8b5f31fd55ec0661946333a2fd6515e75d4449650a73dece5a8df13a1075f54b061481266503b4c8c776d0ca220e360ae7fae5cb0b5ad34fa6a3f4fa4aba2992c7f4d534ae9a62671b587cede6500ab623c87db1ce36db1214539d5afcf592fd3a332e0dcafe7f24686e8dddae43d277021cdcb3a52c37c834f1a79a35df33e49b8bcc797685d6c3e7f3f4fd855dee0b2201b8baf13a4b3714001e0e129039b0e35165d3b8eb714dfeb4408ebe047b6b7a94ef03222f48bfa0307a0630256bd09dbea752d6870ffb832e274f2d215d3ad39eed12fa1fbc43e7e4219437b7661344c3cd53612a302d04130b6409919140542bf5f4bc2c5047cb22a8c355eb54e2f2136df0963324b5568f958cb58247fdde129d34310ce5872f159856f6c1faa9f83c8faa084eb7a04b1722e8873b44c6c24a7c26b56610264be89d5c964a79546916198586b1ff7ad447b800d03866386729a3dfa74dd58ad5257af33a9582c919884699564a8769de190cc36a0db126763fabc9d8ebed00a8f5057e17399a60206d3650487fba77af6bf8aac895fea4dc967328df3b86d5a6f45e4b7db6914444f8d6e00cbac8c41ed450bd4a3a78f19b7a734e6e882dc68bf184226c18c5871380d6da11f02bceabc59de93a86e8a78ad3cdd632e15caeb8e2db20c2eb84db0c071db8749265ea3c92fde193238bfe3188bf8f03cc337771aa47528ad9bbb8b569dd1d85910bdc63ce5726f40b60095fec56704bef4b63bf066161768aab761e6241802e12951dc620a04affd2b829627d0d9d994f832b64dd937fb017f4e18abab7efaeac57c460b7b954a3f7d8b01991f9e2826333e311f97d64d9069178b78407eb7145ec1b347325db5e4e76f8290c484969a38ff8f464b608be549e6b2a7caf9b1ea6e073a4243fbf5c8117a6bf93e737d3f89ba963018454913223fd7ffd46e3cf457ce0f2ec9b3c91394ca7a938a3ddcf706fd143fc414a8bc41a3fd8c69f1d538515a8c846afef4cea407b64e17bb8394c675db06fbcf2b4cb65cdbc953531ac51c13e8bd62ce8c1d8f844aa07afe32e1244c30992fdac30ce9bc5f8499328144be047740aac35f42af440a7c88c0c5645313c4679fe7c92c4991ea0a2c2ed704762798afe3392cea15e3a53315c514c61fa894f6a5857b103277bf6b5de27ddc653a626c8e73510f06c10d77f76e43ff6777a6d241d94b986f9fc2e0a283d0737b9c388aebef49d944c93ba67624181b65ad72d8c7103edfb82a7f51e93776ef1fa76baef0eae354dfea6a9d22cfab2418f67aee8eaf1f9d8b7dd1ccfca3310714531e3dc65ed6abab7baaf7f782b3b700000000000000000000000000eba7e974ad76c6ead663e5605f2139334d7cfe3586ca00191047f1a510c0e2e9bc8e6c369fac546c4c4c4ed5c7850c6bace4b1105d1f168f192aad90c1437821f5d7f644b61760025958d562358dc1960e9df946851a6beccb9217ab49cfc753bc2eb48c44b0190199049e8747a741c529b78c9fa10258f390a6b05fbf7905426d420f7cdc760d69624e524f2ac2cc6e21d6f545e6eceb62a3f895161c1dba70a05e01f584d8ef9d288c16f16b24c965464673b61313ef3fc237f3eb76ae97127828ad04f347340cd3d31f03dc82d1c833367ff1cef83bf613d87fd39fb4f0416d3fc93e638c9b736af63bd4e99d61d48e81d702b9f689268991798a67d522b29247178faf73eaff8fec219c4de180382ec035c86201e56705cbf80bc92815a128e14a287e95a114deea3da51364cb278ff3249c6e2671251e7a244abfb9dc6f95b6d17f9b85dda409e45c1b31d50fa06b0f341b67819654730ddd6392840ecab51fabb7edc26670d8cded6dd636d9c624d34025eb0138b50257873fe021b9af32a89e31a8844383b938fbf124b1708d845f1d22e8473042cfcf715e3dea6db8743c9744017fd05ea65ded3409fdde6a0f8ecafcbfeb0174153127ec375224083a5272f16f9fe470dbb14c1be07d76a1a24ad87b24b865ad1c17aadb80d1f1dcaddee3569f5a789320704c7693deccb6cf6eaf8975c3621597a57ccb28dedf044ded0509dce872dde12ad09b5ae2673efce0085a4e4ed20bb9e42f16d5f6012a874d52484b416efb5afbd3b73500c87a29afe059d54fc28a589b9fd3c48fef5c069884c79b099cf536fde146eecd635ae098b684ef3df33fadcfa2cac89d2524c7833b5cb95c4cb3d9509cd375f2e9d00a62db72b55fb502c0fc8e1e7161fe507edab95c9de315d1373ecf68ddeb229a893a89a24fcb06c193c865e59492bf5dbb786739ddb130dd2052b3062d2f5b4080ebbc9b64d3b14fcf646c58bf1c08d395cdb4a4d8e6844a1a87024225bf49853b5494a27e0d32b82cd278e0421bd8a8a61a5be0e83e0d6c6447a41ab83f3cbb4d22a2474e308a67b5e07dd1695811d9f417f44f44b478bd73e8d8c880ecca9f5bc4b2f8f625eb5bf1a5d202baec966661bb2cce2ea5c2189e7868cd8b760b76375e52c5"], &(0x7f0000001140)=0x1024) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x80000001) 05:16:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000000000003b2534440582497022a6893540355b003000000003030000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 05:16:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x1) semctl$SEM_INFO(r0, 0x7, 0x13, &(0x7f00000001c0)=""/59) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x81, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x80, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) fstat(r2, &(0x7f0000000200)) getgid() ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)) [ 465.697926][T25470] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfcfdffff00000000, 0x0, 0x0) 05:16:35 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7ffffff804fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 465.768216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.774057][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.833071][T25477] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:35 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000009, 0x1000000000000001) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x600, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c081}, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x2, 0xe13e, 0x9, 0xffffffffffffffe0, 0xbaef}) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 466.088231][ C0] protocol 88fb is buggy, dev hsr_slave_0 05:16:38 executing program 1: r0 = timerfd_create(0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40085400, 0x5001c1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000000)="5e9f0fb29fc4b4359209331c9eb9a30565a6cac5c8075c5cf735d037423b2d40d695154d82f44af17c32b1ede944b90de0b0bdac2fdbe54990aa69e3fa87a8be18a12a4d5cf0dc567cbfab4ad1562e1a12152100540f927865a049c553be18dfbbb4f4d162e853c262ffe7790190746a1ae7d093fd77999aedba7f278bda2b93c47c71cb382b39b59e203d677f11dd", &(0x7f00000000c0)="a3f51c32298f7f9dab474d3f60eeb14e34d0a667e80a4b0443"}}, &(0x7f0000000140)=0x0) timer_delete(r1) 05:16:38 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000140)=0x800000000000002, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000400)={'ah\x00'}, &(0x7f0000000440)=0x1e) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x4) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xadbb, 0x2202) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x2}}, 0x18) sendto$inet(r0, &(0x7f0000000a00)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)) 05:16:38 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0x10, 0x2, 0xc) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000100)=0x4) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 05:16:38 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7ffffff904fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000240)={r2, &(0x7f0000000140)=""/81}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000200)={r2, 0x1}) r3 = dup3(r0, r0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/205}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff}) ioctl$IMGETCOUNT(r3, 0x80044943, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000003c0)={0x80000000, 0x10f, "ae3d712ffe508ebb06422838bd4e350f6fbbde67e541337c8acddc2e9889c065", 0xfffffffffffffffa, 0x77, 0xffffffffffffffc1, 0x0, 0x8, 0x81, 0x7, 0x1, [0x7ff, 0x8, 0x80, 0x6]}) 05:16:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0) [ 469.052369][T25540] __nla_parse: 21 callbacks suppressed [ 469.052437][T25540] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 469.061596][T25541] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 469.076709][T25540] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:39 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x1, 0x8, 0x100000000, 0x0, 0x5}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = msgget(0x1, 0x110) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/229}, 0xed, 0x3, 0x2000) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001}) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={0x0}) 05:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x40) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@barrier='barrier'}, {@quota_on='quota=on'}]}) [ 469.124525][T25546] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:39 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f7fffffff04fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 469.226450][T25550] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 469.253120][T25541] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x0, 0x105000}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) userfaultfd(0x80800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000000000/0x8000)=nil) recvmmsg(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000280)={0x0, 0x1c9c380}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_NMI(r4, 0xae9a) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000300)={'syz_tun\x00', {0x2, 0x4e20, @multicast1}}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) geteuid() ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000200)) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x200002, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xfc) sendto$rose(r1, &(0x7f0000000140)="656544bc6acf5b7eb20c6e4ac8887b2a97b241045b8138232e3e8f9b094442a4f00bf25db04a7f0393af7d3b20f3cf561663d57edb286754f1ff1950fe6257d08cb9be33f707b357f4b0c3674c548dc9831b7c245b4d64af6e73bba1dc56fe72da8eb99e0f272ac367c44cc9ebd72f1bfa2e77ded67549354ba8247b073790", 0x7f, 0x800, 0x0, 0x0) [ 469.301913][T25565] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) socketpair(0xb, 0x8000a, 0x2258000000000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000003c0)="098e55278ee69b5504ab7c50891d6659389e7f6651ce9053fa322fe376c83718080ce3d486c3281f3c74fe3d6065a6b6d040930d6e96512c9f3aaed64c1ed9e425dfca6cde4f049bf335dc94df0144a1e15b09811d5e93bee8a7e57c090f2420930410b13571dc7c771766d44f3f10d9", 0x9ee7) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), 0x10) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) connect$netrom(r0, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 05:16:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xffefffffff7f0000, 0x0, 0x0) [ 469.357238][T25565] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:39 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0002000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 469.463184][T25577] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 469.521701][T25581] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 469.577444][T25585] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 469.590174][T25581] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 469.608235][ C1] net_ratelimit: 19 callbacks suppressed [ 469.608242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.614087][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.635904][T25577] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:39 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0003000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0) 05:16:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x190dc3f6, 0x0, 0x100000001}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0) [ 469.875418][T25609] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 469.938224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.944063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 470.250244][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 470.256051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.261922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 470.267684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.568210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 470.574012][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:40 executing program 3: r0 = getpgid(0x0) wait4(r0, &(0x7f0000000000), 0x20000005, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x3000)=nil) 05:16:40 executing program 2: r0 = socket(0x10, 0x2, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000f80)={&(0x7f0000000140)=[0x1, 0x8, 0xfffffffffffffffa, 0x3, 0x9, 0xffffffff, 0x81, 0xfffffffffffffffe], 0x8, 0x2, 0x6, 0x101, 0x8, 0x100000000, {0xec4208f, 0x78b, 0x6, 0xfffffffffffff000, 0x1, 0xffffffff, 0x6, 0x4, 0x1, 0x1, 0x180, 0xfffffffffffff800, 0x9, 0x9, "239a554dde19cf627653da0bdac2dcbe7c9d2487eb1deac962de6061ddec213a"}}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000080)=0x6) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000a80)=0xe8) getgroups(0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0xffffffffffffffff]) r8 = getpid() r9 = getuid() fstat(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000c80)=0xe8) r13 = getegid() r14 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000cc0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) io_setup(0x9, &(0x7f0000001000)=0x0) io_submit(r16, 0x7, &(0x7f0000003580)=[&(0x7f0000002040)={0x0, 0x0, 0x0, 0x5, 0xdf, r0, &(0x7f0000001040)="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", 0x1000, 0x5, 0x0, 0x3, r1}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000002080)="43cdea8838b804a1f8dcc22dd25b006065320b5a6e6b0d3a8dbcffc90e9f9d7aab3a65c09b87230792ee333f7ae6777d1d669bc85d8cadb5c8d464fa93b089aefdac33add388db2d2f4866b09d6b91485da731924f75ac4c4fa7fbb93e0b246450d22ab047e85b947e7f8cfe5293d91ea9a5", 0x72, 0x10001, 0x0, 0x1, r1}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x6, 0xffff, r1, &(0x7f0000002140)="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", 0x1000, 0x6, 0x0, 0x0, r1}, &(0x7f0000003280)={0x0, 0x0, 0x0, 0xa, 0x0, r0, &(0x7f0000003180)="3ac85784e395d3b2094bec570a4e5b1f054e5d064eef1c045b44d5c9c8b7805488a45f8de3000ca9de36d8afc80e36926f34f978e60f2815772e57fa8032c94251c0ed7a89749863529e20479b9605db8a3f24fea33d6e2d930d90f6d50b7880594577859fd70693162e0363de41dfd1729f36bfeb660861af0cee2b053c8fed3a22c6b525b7b5771a148439278abf877b07e256cc2e7ee8fe6d2684deaa7a5063cd76da78494b5c7226c32e4b602c3be85d41dbb008b53d8dfd3bed52ce0d7057d12f9a576f6f4db4337b5924c4ed39a9b722b2bb69ceac830b1b54224c2b9c7691ce7cd2e906edd26ab695b999109cbe737fa4d22331ade60c2b", 0xfb, 0x49, 0x0, 0x0, r1}, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0xd, 0x8001, r1, &(0x7f00000032c0)="b9b284a6214d9de849ac5f51010aa9a199499a04e405578e077801dade7e5e4dd03bddb0888253c7a599b47311c03578068ea29713504d22c640e16c300279ffee96768900b7802fe53c6807f87fb5ba8ce8fc0a3ae57c9b09dd61863f4ce1f75a0262b71244c875ce9e2972637b5aff4cdc8a79dc4bfd369f2da0d1d7dd92e67e0c13da51e61a2b69c8af33f74d03c4a88f4e8aa9ad47549446dd6d0df41ad87d78e6086689caae0e6bb9329c0648df6f29e511b54c5acccf81554cd7168d56c159361fd32aa7ce84f74ca8bf53033f211903db077228de0aee8352e5", 0xdd, 0x86, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000003400)="60427e8c674c72e239fdafcd1c63ecfd6a95a0691ad46e0f40c4003c9aeb7c24fb0ba150073cc2c3cc545bb13586079b4f7848bc99f702159744a33b76999951afadda17ba5c9c6155a15e3da52d149c01717e607f4edeb27ae5448d4af79dbdbc8f9cde429d8cf4a6e871bd2b631814f3f6744559dd6a2a772f419bc3f500686cc32368d489", 0x86, 0x0, 0x0, 0x3, r1}, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000003500)="aedfac2adac4e38047b77378f5b44afaa66cbfccfe0427de5d2cc9d194f35a41dcc8def8e422", 0x26, 0x32, 0x0, 0x0, r1}]) fstat(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/cachefiles\x00', 0x100, 0x0) sendmmsg$unix(r0, &(0x7f0000000f00)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000000104f8ff01000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x38, 0x40010}, {&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000480)="86a88bc876722ce066155170819f3e674bf97748c8da0b106b86fd731ec2c4eab0948dbb0cf140c5671a5303a0f55c377b0b3f66358369f1543643ea054ac7ebcda8", 0x42}, {&(0x7f0000000500)="dc2e8e17248f8e953046340a322bbee3fe94cd61b53ecfb1ccd7616793260794005069d1e844598ad3b2929bd5a7c12a1d594c693f0210b282c4cf0d6b252e0b3c9aa6afdb2ac0f630a182b38f9c785f3f11630eb94f339e5ec6d4fc743986e41bf1ada8c71a4a8a2a17cd18b94459d5b3263427fc0c50cac065ef0aadd5988a75fd8135aaeb9c4bc7bbfeaf708fb277310bcce132ce343b4d911c9539908d5a029127a0ae6dfecbdc31af23d223ea8f38e0f82357d5c00a8ccdec8c", 0xbc}, {&(0x7f00000005c0)="d9007a544e639c5cc12458d6c2ecfa5a59c96c5f0f4a8c19a899a74a4b20803b70e7177f0ea9e66319d492057dbe02240cb9907a743d39ab7154776cc0796748e752e1fcaf3ddd28670f59ec0c60acc396f24e0a0b8f3bf662e46f570d4fa24c9152e517b1e2", 0x66}, {&(0x7f0000000640)="dbe5ee41a1fddbe91d46ab1b6896b43457c1c3c6d06ca651bb27ccc0a8727c83e59b5494db7ccb0bbf2b73d62ab5e35b36c2c152b3f4c700dcb245bb77b96b2bfd3d202342d1a781ca8588c2a670bb874c6406c51ab7c5986df93a915b492b29afe644ba768b259d2569497796b51ec07b891828cc25d471c4f19da9c38daa82a841b756857fe502abebec5bfc99016dee2376daf3f00eced084a2bf8e55649572de142f94e3f8e1e5c0e3ab224254b38cdbff7ca8bb3ed603b6dbb758d31254bae55e9d02a2013fefa4e7cfd5afd731dae54937584f4108c1f4a15a4be8626fce8a5c7b41b711bd9025f40fee98a849", 0xf0}, {&(0x7f0000000740)="9597292335c3d3b4205dffbc96a04cbb5185976a279d62519eaf551544b5c59582cf5c09cc2ae3aec66f6c36aa908e3ccf0537a129bbad7c03049378c74bd168fc46c039a73a4e429765b94a14a26bccf47e71d8c694a913faf9476b38025ea4b44a4965a7d23457700600fb8f3adfffdc6ddce2e3f2ba6279946cfcaeee7ef3b0dfa5976237cb1824a256ab4e62fe3da8c54584148227ff56f9f62b09487c3d2b900b6301f35893b47547242c84bb3c2f1e4cc6c1f405ab9fcbde2024fa62e8c1052d6d6dde67f68d96be8d1c6f8a8a6f0c5a336fe2d0980e868c0e5fe6d77a", 0xe0}, {&(0x7f0000000840)="fc03d11745953dd37bb4628a081c5a43de7ae9b918f9300cf2ef3dbb176918a7911138e47358ab4b59cda27715cc8ff182eca222e3fead77a7563eea97dbd1c008513e1c70fa84136fe9d6bb435485f369c25da457ebff1add8a22fd4fb6364e1ff40bb75db9e12dfa882137ddc9a909572bf6455ad2d25c1b2e84fa781c96ca032bacac5bf6f17a37471df19f46b125", 0x90}], 0x6, &(0x7f0000000e80)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r17}], 0x80, 0x4000000}], 0x2, 0x20000000) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:40 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000400)='/dev/capi20\x00', 0x20000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000280)={0x5, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xb, 0x200041) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000140)={0x200, 0x1}) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000002c0)={@remote, @multicast2, @broadcast}, &(0x7f0000000300)=0xc) ioctl$KVM_SET_CPUID(r3, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000800000000000000000000000000000000000000100010000000000000000003f0000000013009f7e05435916f87e06af1752605a6891b4697b309c47ad38d311d46438dfd22ded175b15d4ad36bfd28a0af114afb6fbd57b462b0939ed5d8198d894cf3aef9a8d5c1ecbb37f92813de2cedd40ae36215dcc6fb28f6a6aa8d8f852dbe17bd5a235ed1502f20f1ac07c27ed85df5cfb60a8fbcff80699b4beebf02fcd14d6933ed9bdf8e35e1e60acc0a7c8bc3c9d47532429f300000000000000"]) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0xf000, &(0x7f00000001c0), 0x4, r4, 0x8}) setsockopt$inet6_int(r4, 0x29, 0x27, &(0x7f0000000380)=0x7, 0x4) 05:16:40 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0004000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x239, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x0, 0x320]}, 0x2c) 05:16:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0xffffffffff600000, 0x0, 0x0) [ 470.666282][T25638] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:40 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0005000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:40 executing program 3: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000200)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x200001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000003701000306000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="12002f6400006469432344230000000000190000"], 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x50840) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x58}) [ 470.733595][T25650] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x10000000000000a, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0xfffffffffffffff7}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getgroups(0x9, &(0x7f0000000540)=[0x0, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0x0]) getgroups(0x2, &(0x7f0000000580)=[0xee01, 0xee00]) r10 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r3}, {0x2, 0x0, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}], {0x4, 0x4}, [{0x8, 0x0, r7}, {0x8, 0x6, r8}, {0x8, 0x1, r9}, {0x8, 0x4, r10}], {0x10, 0x2}, {0x20, 0x2}}, 0x64, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc0000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x4) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 05:16:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x57d0, @loopback, 0x1000}, @in6={0xa, 0x4e23, 0x100, @local, 0x2}], 0x38) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000140)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0xb) 05:16:40 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x100000001}, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40a000, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/127, 0x7f, 0x40000020, 0x0, 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) rt_sigpending(&(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3053}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1c000000000}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95f2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x36a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 05:16:40 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0006000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x4, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:16:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = semget$private(0x0, 0x4, 0x20) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0x1, 0x3f, 0x5, 0x2]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xb2b3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x80800) 05:16:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2) 05:16:41 executing program 4: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigsuspend(&(0x7f0000000040), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0', "4974fdc8a64b609458dac6305ac30df7aece1a20496db4a2b7e2e423070e6a49650272c51d05e81a9079cf4f28cdf5735fd4703eae3f9dd21f80c1e63c36248a7440ff7551f1b0e752ea43a47dab3bfa4bf6c7ae7bde22eac126599a"}, 0x60) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) 05:16:41 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x9) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:41 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0007000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) unshare(0x8000400) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0xc0405519, &(0x7f0000000000)) [ 471.327712][T25718] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001900010b00000004000000000000000000000000ac141400000010000000000000000000000000000000000000000000000000009468eca33b3b709130be3e46d3c6ec08477b6518f248210f660f15d413153c5cb01d0eb6d729386c8c2d9bbcd5e5f423ebbccf00add50b1b9812538d31da2ea2fb2d31da4f5a1376c85cc06e2c9e430417561ab5320126cb94b0bf31c5939932bfaab105f84907b91bd2f74621dc25d768d70de595cddde6d07821e3f0a3ce96827e8f2c89f0cc769511175ff7493b79d72411961011b1fbf49991b0c79dd20335efbee5dad2eee42933bcdba9562787165c42a920cdfc030cc31a39b4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000"], 0xb8}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8401000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x704, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x800}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 05:16:41 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0008000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 471.408701][T25726] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x4) 05:16:41 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x6, [0x0, 0x2000000000000000]}, 0x2c) setsockopt$inet_group_source_req(r0, 0x0, 0x100029, &(0x7f00000000c0)={0x4, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}, {{0x2, 0x4e20, @empty}}}, 0x31c) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x400002000000110, 0xd, "ad"}], 0x18}}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x6, 0x7fc000, 0x4, 0x3, 0x3f, 0x80, 0x33f, 0x40, 0x36f, 0x4, 0x8, 0x38, 0x2, 0x2020000000000, 0x5, 0x9}, [{0x3, 0x101, 0x7, 0x4, 0xfffffffffffffff7, 0x0, 0x222, 0xfffffffffffff000}, {0x1, 0x6, 0x49, 0x4, 0x0, 0xffffffff, 0x3, 0xdbf2}], "87f0633ff1f8f6992d4ee3127703553af273ea5525f32b27a6e85eb1480a7fee0c87e68f36015c2cca2e37b349f8b70b70d5179fa7", [[], []]}, 0x2e5) 05:16:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write(r0, &(0x7f0000000100)="8c4c5d6f821217b6d58ba8cc3b9679baad5cc9c1f71003027354fc0415ecf0b540d585bdd0335f7a3572664a9b1490dc2822217ec85d887f554120c8e2e0cebd84940b083dea734febf2f5a7abd88887d783a23fd495f7a6cb0d25192da6a5e0639960df4c0e0a0b2322cfda38f8ed20e0126ee85f3480f00be9803947096274455820f7641d37d0628aa86000d0fbc5ca5e80a111dc633fd13af8b87ada5e8dd6d49f25f90241a325f4571f7fc98df93c82219915d66d731528fd271de556618c61e9bc10114a2dc01b8b1b6222f77f70e16db85ab73e660d8cf3853c935868999182046a50a4b0d75d57bfa1", 0xed) tkill(r2, 0x1000000000016) 05:16:41 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:41 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000a000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:41 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000340)={0x18, 0x2, {0x3, @empty}}, 0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000440), 0x10) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x3ce, &(0x7f0000000080)={&(0x7f0000000480)={0x5, 0x800, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "27ff84d9a3eb1d586a35d085dd7e9bc0513d68af80fe4e671906368ab3814993f3c41dd78e5c3a8a35d849afe054c14b8516a29a153ed9e5b7e67a63085c758f"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3d556e4621331a24"}}, 0x48}}, 0x0) [ 471.624131][T25749] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x167e}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x185}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x900, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}], 0x2c) fcntl$setflags(r0, 0x2, 0x1) prctl$PR_SVE_SET_VL(0x32, 0x2a3a3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="006d656d1e2d909b3b02ed1d"], 0x200600) 05:16:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) [ 471.740119][T25760] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:41 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000e000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:41 executing program 2: r0 = socket(0x10, 0x80000, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/107, &(0x7f0000000000)=0x6b) 05:16:41 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) syncfs(r0) ioctl$BLKZEROOUT(r2, 0x125d, &(0x7f0000000180)) 05:16:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001380)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000680)) r2 = accept$nfc_llcp(r1, &(0x7f0000000700), &(0x7f0000000840)=0x26) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{0xa, 0x4, 0x100000001, 0x4, 'syz0\x00', 0x800}, 0x1, [0x2, 0x4, 0x1, 0x2, 0x3f, 0x10001, 0x5, 0x0, 0x7fffffff, 0xffffffffffffff81, 0x7, 0x37dc, 0x6997, 0x100000001, 0x7ff, 0x80000000, 0x80000001, 0x0, 0x401, 0x8, 0x8, 0x1ff, 0x3, 0x7, 0x7, 0x5, 0x1, 0x4, 0x6, 0x8e, 0x5, 0x5, 0x4, 0x1, 0x10000, 0x8000, 0x1000, 0x3adec729, 0x5, 0x401, 0xffffffffffffffff, 0x6, 0xf7, 0x66, 0x69, 0x8, 0x6, 0x6db, 0x3, 0x1000, 0x2, 0x3, 0x7, 0xffff, 0x9, 0x4, 0x3, 0x1, 0x9, 0x77e, 0x0, 0x1c0000, 0x7d, 0x32ce, 0x6, 0xe00000000, 0xfffffffffffffff8, 0xfffffffffffff800, 0x7, 0x2, 0x6, 0x1ef9edf6, 0x8001, 0x1c00, 0x7, 0x80000001, 0x7, 0x9, 0x671c7395, 0x8, 0x0, 0x0, 0x2834, 0x9, 0x4, 0x0, 0x8, 0x1, 0x9, 0x8, 0x7, 0x4, 0x101, 0x101, 0x93c4, 0x36, 0x200, 0x6, 0x5, 0x5, 0x9, 0x1, 0x80000001, 0x5, 0xffffffff00000001, 0x786db5f6, 0xe951, 0x0, 0x1f, 0x5, 0x2, 0x859, 0xfffffffffffffeff, 0x5, 0x400, 0x5, 0x7c00, 0x5, 0xffffffff, 0x1, 0x3ff1, 0x6, 0x3, 0x9, 0x100000001, 0x4, 0x7, 0x8], {0x77359400}}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000780)={0x2a, 0x6, 0x0, {0x3, 0x6, 0x1, 0x0, '\x00'}}, 0x2a) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000800)={0x1f, 'syz0\x00'}) close(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000880)={{0x3, 0x1, 0x5, 0x7ff, '\x00', 0x6}, 0x1, [0x3, 0x5, 0x401, 0x9, 0x6d362c8c, 0x7fff, 0x9, 0x1, 0x2, 0xff, 0xffffffff, 0x3, 0x1, 0x7, 0x7, 0x4, 0x2, 0x6, 0xffffffff, 0x7, 0x4, 0xfffffffffffffff7, 0x1f, 0x8, 0x6, 0x10001, 0x6, 0xd3, 0x3, 0x4, 0x1, 0x1, 0x40, 0xfffffffffffffff9, 0x9, 0xff, 0x6, 0x7, 0x3, 0x100, 0x5, 0xfffffffffffffffc, 0x800, 0x1, 0xfff, 0x65, 0x0, 0x3, 0x800, 0x3, 0x65, 0x1, 0x1, 0xfffffffffffffffd, 0x2, 0x5, 0x5, 0x3, 0x2, 0xfffffffffffffffb, 0xc0, 0x4, 0xe20, 0xb13, 0x81, 0x4, 0x5, 0x5, 0xfffffffffffffffb, 0x3, 0x40, 0x395fa698, 0x7fffffff, 0x9, 0x57, 0x559, 0x1, 0xd041, 0x9, 0x6922, 0xa0000000, 0x7, 0xfffffffffffffffe, 0x1c6, 0x516, 0x6, 0x10001, 0x20, 0x100000001, 0x3f, 0xfffffffffffffffa, 0x4, 0x6, 0x0, 0x6, 0xb3a, 0x10001, 0x8, 0x0, 0x400, 0x6, 0x6, 0x2, 0x1f, 0x5, 0x0, 0x1, 0x28000000000, 0x0, 0x1, 0x6, 0x9, 0x5, 0x8, 0x4, 0xff, 0x1, 0x5, 0xffffffff, 0x8001, 0x1, 0x8, 0x5589, 0x1, 0xff, 0x4, 0x101], {r3, r4+30000000}}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x14, &(0x7f0000000000)={0xbdef}, 0x8) 05:16:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5) 05:16:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000009c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in=@multicast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@loopback, @in6=@local}}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001100)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001380)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000001340)={&(0x7f0000000440)=ANY=[@ANYBLOB="000200000000fedbdf2500000000"], 0x1}}, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0, 0x5}, 0x35b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00b47adb064827b5b2a356cbf4dd8a871d0004e305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000500)={0x84, @rand_addr=0x8800, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) accept4$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="00022abd7000fbdbdf250c0000006c000200080006000100000008000b000a00000008000700260a000014000100ff01000000000000000000000000000108000b000200000014000100000000030000000000000000000000000800040009000000080008000400000008000b000a00000008000b000a00000060000200080007000700000008000b000a000000080009000000000008000b000a000000080007000300000008000b000000000008000b000a0000000800090000010000080006000000010014000100e0000001000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) poll(&(0x7f0000000440), 0x17b, 0x3ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fr\x00\x00'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x100000001010, r1, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)}) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = add_key(&(0x7f0000000540)='cifs.idmap\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000940)="aec90734f3511ecc593e0c1292e936392527692d95739f663c584e71637d67adfec55784346e388ba645b6c7733b830513df29e073bde00d3990b8fc9c44ec04cc44e267dffdabf53a4ac67bde45b7dd7095a60a0378cef9be2d34749132f01051b1fd7307bb49b956b7fe17ebb8de0a9f74ad890603e7cca1fa9cf81a237d", 0x7f, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f00000013c0)="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", 0x1000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x0, 0x101000) 05:16:42 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000f000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:42 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b00000400020423ca0200cf00000000000000230000", 0x252) 05:16:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x444000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x2, 0x2}) 05:16:42 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x10400) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@loopback}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r1 = gettid() ptrace$getregset(0x4204, r1, 0x207, &(0x7f0000000080)={&(0x7f0000000000)=""/118, 0x76}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000000, 0x0) [ 472.295258][T25803] binder: 25799:25803 unknown command 29196 [ 472.313215][T25803] binder: 25799:25803 ioctl c0306201 200000c0 returned -22 [ 472.346566][T25813] binder: 25799:25813 got transaction with invalid offset (72, min 0 max 0) or object. 05:16:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6) 05:16:42 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x2000) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r2 = getpid() sched_getscheduler(r2) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) 05:16:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 05:16:42 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0010000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 472.434243][T25813] binder: 25799:25813 transaction failed 29201/-22, size 0-32 line 3131 05:16:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r1 = fcntl$dupfd(r0, 0x4, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x00', 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x1, 0x6, 0x0, 0x7f]}, &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0x0) execveat(r3, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r2, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x1000000000013) [ 472.594585][T25844] binder: BINDER_SET_CONTEXT_MGR already set [ 472.621436][T25845] binder: 25799:25845 unknown command 29196 [ 472.676329][T25844] binder: 25799:25844 ioctl 40046207 0 returned -16 [ 472.676353][T25813] binder_alloc: 25799: binder_alloc_buf, no vma [ 472.704386][T25845] binder: 25799:25845 ioctl c0306201 200000c0 returned -22 05:16:42 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) socket$unix(0x1, 0x5, 0x0) 05:16:42 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0048000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 472.728235][ T3472] binder: undelivered TRANSACTION_ERROR: 29201 [ 472.779832][T25813] binder: 25799:25813 transaction failed 29189/-3, size 0-32 line 3056 [ 472.886382][ T12] binder: undelivered TRANSACTION_ERROR: 29189 05:16:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280), 0xfffffffffffffea1) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/171, &(0x7f0000000180)=0xab) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000012c0)={0x13, 0x10, 0xfa00, {&(0x7f0000001840), r2, 0x1}}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001440)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0x218, 0x118, 0x0, 0x0, 0x218, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xfffffffffffffc00, 0x80, 0x1}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x4580000000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xff000000, 'veth0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x2, 0x3, 0x40}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={[], [], @local}, 'team0\x00', 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x807) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040), 0x4) recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0xffffff17, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 05:16:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7) 05:16:43 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x31, "849f8c894f975e5ab5c3a073633abcbba0ab0730d07c73536f77f2560891827e8b286464b8c21ffb6350e7aba492372bda"}, &(0x7f0000000080)=0x39) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x2}, 0x8) 05:16:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @remote}, '\xff\x7f\xff\xfe\x01\x00\x02\x01\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa0200, 0x20) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x7ff, 0x3200e1, "427e7f05477ea13638dc79756c21129392388d9197277ada", {0x6, 0x7ff}, 0x2}) 05:16:42 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f004c000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:43 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0060000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:43 executing program 4: capset(0x0, &(0x7f0000cc0000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000200)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x1000fffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 05:16:43 executing program 2: r0 = socket(0x8000000000000010, 0x2, 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x0) write(r0, &(0x7f00000002c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x37900000000}) 05:16:43 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f00000000c0)="0af51f023ccc419a0d8af6d3a5ac123f874cf8f1") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffffffffffd}, 0x48) 05:16:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x9) 05:16:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r6, 0xfffffffffffffefc) 05:16:44 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x2) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 05:16:44 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cffeb744c7b430db6f1ef01632ff304a65d05204f293fc5314a5f09f9830b5df63d470644dee9042c06b69a58139457af05f6fea214d457bd720551ffa7432f2ba6acf99c00a6b1e320e88581abde210f4f3bbd82998b1064dbc97da60ab35fc1023", 0x80) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000001440)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3cac9597410be0aacbb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e4fd99e3200119d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b0df1a7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ebffcf9ade407dfb50948aa97077a195b5f6eeff443be20f383aa8ebbb4b0f2e888cb7cde9ec09177f4576576f088430e4a61d352607113ce7118f2d0000000000000000", 0x566, 0xc001, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/82, 0x52) sendto$inet6(r1, &(0x7f0000000000)="f11d9485945530b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721908ec5fd0cd4fc40b461afc79758bb2ebb7ba7e67fc49a3d4bb896b2", 0x3b, 0x8000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000900)="c5cbdeda579d85f4a014ee69", 0xc, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) move_pages(r2, 0x3b, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040)=[0x8000000000001, 0x7, 0x8000, 0x5b, 0x8001, 0x8, 0xa3, 0x9, 0x3f84000000], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 05:16:44 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0068000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 474.221115][T25955] __nla_parse: 42 callbacks suppressed [ 474.221126][T25955] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 474.253868][T25959] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x5ba, 0x8) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffe22) 05:16:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x82000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x8001, 0x0, "9a142863838f6d83662868c9a6769caf82a557f10e5a1fe71e3d0ed2f209a12308807ddfd61410c94e0d8a4b5dfcd44965b607f33bdc555647488b97ec8ea65a8f586373d35f23d273267b6c9cfdffa7"}, 0xd8) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 474.274035][T25961] validate_nla: 6 callbacks suppressed [ 474.274046][T25961] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 474.336341][T25961] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 474.345490][T25955] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 474.362392][T25959] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 474.400747][T25973] binder: 25969:25973 ioctl c018620c 0 returned -14 [ 474.443146][T25973] binder: BINDER_SET_CONTEXT_MGR already set 05:16:44 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 474.483863][T25973] binder: 25969:25973 ioctl 40046207 0 returned -16 [ 474.490768][T25979] binder: 25969:25979 ioctl c018620c 0 returned -14 05:16:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa) [ 474.613245][T25986] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 474.671782][T25989] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 474.728226][ C1] net_ratelimit: 22 callbacks suppressed [ 474.728233][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 474.739726][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb) 05:16:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() sigaltstack(&(0x7f00002a2000/0x600000)=nil, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0x0, 0x7, 0x7fff, 0x80000, 0xffffffffffffff9c}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 05:16:45 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) write(r0, &(0x7f0000000080)="faa14942395dcd3d3c7d00d13b99da4aeb8248ec04749828f178c82eccc247ebcc32cd6094f4bd907b34d60c0b9e28a4ff35bf13829c06bd3db292862b0f1ea535538da6b82c182d85b2f812c1ebf3e492867dd6e7e27d63ee82170a7ce6c2e29b2e09a9cc202bd2dd158a7503317e07f705818b1ced6d64ed52bf25fb7b732cedd7d6a010e3bb4b92857f29a3a750ff5d91c11ad83b3534edb75c9bec45dd2f606d8416dc1dfa899300d11cf09e863c598bf6df2be3f7b3d69b5ab48513deb1695cf077a427dfee25", 0xc9) 05:16:45 executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000cc0000)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400c40, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.upper\x00') ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x7fe, 0x800) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r0, &(0x7f0000000180)={0x20, 0x0, 0x2, {0x4, 0x4, 0x0, 0x7f}}, 0x20) 05:16:45 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f006c000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:45 executing program 4: r0 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) fcntl$getflags(r0, 0x401) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa24, 0x0, "a89561fb1d160172bd0691aeb413e72e189df097f8013c78d13355fe09e1748b"}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$void(0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f0000000540)={{0xcc, 0x2, 0x0, 0x381, 0x48, 0x0, 0x127, 0x4}, "debf8aa765d5ebc5895ee42285da3a9f96239f38ec48f0a68e312d707fd74af684e023bfc6a1944e799df8b465a14fb724fa70853bef5ac7b797afe7251001374ea3f54a49f8f364320c6e8be82b3d863733644a55c68f810855cadcd346d9427038b66ce9d4e54cb01bb22841014bdef82d78c648aae534163ed4bc4a0eb703e069cebe32c20a5d901aaf53f8d6cef767ccfa35ba5214f8c77aabd9e6ecfd75af136eeba8b6c664aea0414301b7", [[], [], [], []]}, 0x4ce) ioctl$SIOCNRDECOBS(r0, 0x89e2) io_setup(0xffffffffffffff81, &(0x7f0000000040)=0x0) io_cancel(r2, 0x0, 0x0) accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x80000) [ 475.138336][T26014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 475.150069][T26015] QAT: Invalid ioctl [ 475.171005][T26019] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:45 executing program 3: shmget$private(0x0, 0x2000, 0x410, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x2, 0x3000, 0x54001202, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/140) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000240)=""/165) [ 475.191253][T26022] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 475.210002][T26019] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 475.251523][T26014] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 475.251769][T26022] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:45 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0074000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 475.321083][T26032] QAT: Invalid ioctl [ 475.379134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.384955][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:45 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffa) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000180)={0x0, r0+10000000}, &(0x7f00000001c0)) 05:16:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x800005) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:16:45 executing program 2: r0 = socket(0x10, 0x2, 0xc) socket(0xa, 0x7, 0x200) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 475.420392][T26040] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000280)={0xe57e0000}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x37}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x0, 0x6}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000140)={0x519758a4, 0x0, 0x18, {r4, r5+30000000}, 0x5, 0x81}) 05:16:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd) [ 475.558061][T26058] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:45 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f007a000104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 475.602237][T26064] QAT: Invalid ioctl 05:16:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x61, 0x2, 0x7, "7118459e7e7ec1762b8a0b4fd3362276", "fb74d2bc27c5a0ed1723a2d2f8dcfbbb5643aa1dbc1b0e468d5d83c023512e91f0d8ad6a9dd174edf7aff02247fd155800b8ade62ced3cea70948ab8e935a58b9adbd531c265b7eaf0c1cc1c"}, 0x61, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1000000006) 05:16:45 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000019007f5300fe01b2a4a280930a06000000a8430891b702003900090008000c00", 0x24}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='$', 0x1) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:16:45 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) chmod(0x0, 0x112) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x101000) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 475.678088][T26067] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:45 executing program 2: r0 = socket(0x10, 0x2, 0xc) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7b, 0xc00) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002180}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@delqdisc={0xa0, 0x25, 0x400, 0x70bd27, 0x25dfdbff, {0x0, r1, {0x0, 0xa}, {0x6, 0xfff3}, {0x3, 0x5}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x34, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x100000000}, @TCA_CODEL_TARGET={0x8, 0x1, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xbba}, @TCA_CODEL_TARGET={0x8, 0x1, 0x990a}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x2c, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x1000, 0x101, 0x9b0c, 0x81, 0x2, 0x100, 0x0, 0x6}}, @TCA_STAB_DATA={0xc, 0x2, [0x7, 0x8, 0x6]}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x4000) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 475.848248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.854123][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:45 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000030104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x1c}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00') setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0x101}, 0x2) syz_emit_ethernet(0x35e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="d6ceadde4244", [{[{0x9100, 0x1, 0xfffffffffffffff9}], {0x8100, 0x4, 0x7}}], {@ipv6={0x86dd, {0x3f, 0x6, "a72e6f", 0x320, 0x3e, 0x200, @ipv4={[], [], @rand_addr=0xffffffff}, @mcast1, {[@hopopts={0x3f, 0x28, [], [@hao={0xc9, 0x10, @remote}, @generic={0x375, 0x1c, "c772e5b882b11480a617290e55d439ac8d41667784b65724936de834"}, @generic={0x4, 0x49, "9e88badb2f7458404d8f953c1f347a409e4abf4d4651b244fb32641c63801f42e56436e72abcb0ef5dab6eb429ed4cad4f46740ee4c50673da97aadc5655b9d81d36b7547fad547be6"}, @generic={0x0, 0xc6, "df93ace55c2904538a07fb1470a191bcb8dffc2d060fe247393d5994750c974badf58bc21774cd23d7554e7d6396bc84292e5f4b4b4ff3355be732b25b55f60750749c43fdcd2d36111cfc923dbb87f8539368893c64bd11acb537bf82d14c753cf33e3ecf521966e09e6e9bae7888cf7cc00c0e7feab2e00b8728807c75e90108fb3471c6db8d675657d00b863135efaa98ee291d4fd1f828a065bde999769104697944c9d3da27f0891a46a1f4448dd0cc5a28013fb19ff5c80cb1e34a7a5f0744756a87de"}]}, @hopopts={0x2b, 0x7, [], [@ra={0x5, 0x2, 0x68}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x40}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x40, 0x60, 0x7, [@remote, @empty, @ipv4={[], [], @multicast1}]}, @routing={0x1, 0x2, 0x2, 0x4434, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @dstopts={0x4, 0x3, [], [@hao={0xc9, 0x10, @rand_addr="e034edb23c51a4f77e0b98307a59da12"}, @jumbo={0xc2, 0x4, 0x7fff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @srh={0xff, 0xe, 0x4, 0x7, 0x8, 0x60, 0x2, [@loopback, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast2, @rand_addr="f8dddc8180307bab87c06e6c6308ac08", @remote, @mcast2]}, @hopopts={0x33, 0xa, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa4}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x7, 0x2, 0x9, 0xd91, [0x6]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x16}}]}], @udp={0x4e20, 0x4e20, 0x40, 0x0, [@guehdr={0x2, 0x10001, 0x1, 0x0, 0x0, [0x80]}, @guehdr={0x1, 0xcf1, 0x101, 0x8, 0x100}, @guehdr={0x2, 0xc67, 0x9, 0x1, 0x100, [0x0]}, @guehdr={0x1, 0x3, 0x2, 0x8, 0x100}, @guehdr={0x2, 0xfff, 0x6, 0x0, 0x100, [0x80]}], "d215b57587cf13b22f0aabc651d918d57036c81186a698a9"}}}}}}, 0x0) [ 475.962036][T26096] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x14) 05:16:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x6, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x4, 0xa}}, 0xfffffffffffffd3f) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x40605346, &(0x7f0000000000)={0x0, 0x2, 0x0, [0x74000000]}) [ 476.082436][T26114] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r1 = open(&(0x7f0000000140)='./file1\x00', 0x404000, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r2}, 0x2b) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) time(&(0x7f00000000c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x3, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "263135faeea98bd3"}}, 0x48}}, 0x0) 05:16:46 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000050104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 476.168210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 476.174589][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:46 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x80) sendmmsg(r1, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="a15cca0b694cf5438f12cbdcdd002c6cebf00c0a127a2059bf7d1c8727de4c6bb84e5e317cc7745b337f63e9b16cf74bd9669ce937c29d304e0bd76b91c63622fe76dd277ccdf992440598c06d68bdaaff2e29d89ebefa8206c3058ed748ef10b3e6d6a8459f3481555af998fd44ac2fa1b8edbd9ba6530466a8da320aa7bfe7f5e36274", 0x84}, {&(0x7f0000000300)="d585db76af029c9f74c31ea1bf18956710a204cc", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="cef192e03253a1bf2a82fd703e8336daefcdaeec4981948d1af83dd762", 0x1d}, {&(0x7f00000013c0)="48e56b49a691905920e9e96580482666c83b9f28c4b936aded4a4dcc6d35d962f1327d0605a815d2ad62ee18265355b548a8c124243c731fba61e1198a13f63e4ad6b3075b89c7b1cbad9831938b3bfdba44a9005cd13c70e54fff1d14156afae8031b2a180467c4d3f9a8036e31c06408b4333d0c56693b29bd62348f4f054bf88c761c3249bd3cfc2b728e3486994c48e01bfdae03463906c04edc397320e7e44e4ae08c53b057ce7c03b1d324fab28c13d601cba20da480fd419526b99c699000cbaf7da5f911a3ff0339ef3d04b5179d35368ec3d962e2ebc2db4ccc1eb7e9e04b921104724df806866989b4a35d5627b2e3", 0xf4}, {&(0x7f00000014c0)="b7d338ed39e39c1edc5a9bec75f040a73c826d74cd8f93a88c06b6c9613a9f13e4719c98e4e7eb1558a83195588f5a8eaaada2422be626f8fedf7a1472b54f84c2912b588c522b05dd33ba0bfae89a1526d343bf51e70e4042f9da9a35c1fe3c1fc6a9eded80ef9228422f9b89574e2a91a5495a05b9a2b45b0f938ce6c1", 0x7e}, {&(0x7f0000001540)="fe61734a399b5d30211ee184958d0c801e29f420b09a54b0a801d3ee67e439c9ff8c3c1757ec4b3727f93376820ba048fd2974ad2523b5c105138e9bb87d449c48757888823509f0d55d6a76ce95460a008afc218adb778e3b390e058b82ca485750d076297f70", 0x67}, {&(0x7f00000015c0)="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", 0x1000}], 0x6, &(0x7f0000002640)=[{0x108, 0x0, 0x400, "df95cc3632895404624ecd0ac17e267110f8b64281d1714537defb8d2982768fe29201975b229a92f0a1e295878fc3ca8a8bfc22c840f6db682bf4545fcdc6ed771653afd1122046e1d693056094bcae3aa8f2256aa83a980daaf5ad32717e801923ce6196541dbb5d3852c44164c772f44597d0dc94dbb0896bf245956d0d89a8d99f09c365db23c9fa5138580296800e43cc22d59926c5df6e21b048d54d231c7be58bd3a1cfa7ef8661fd60a4a1f4629083494056a59c25c7df8669b2519dc3c2152d900379f089a1b9f405ce12aa1a117e7d54c1f075566973a4b5801717bc5bfe32d8e695ddb1238590e17c8e31c3ee"}], 0x108}}, {{&(0x7f0000002780)=@rc={0x1f, {0xffffffff, 0x9443, 0x6, 0xfffffffffffff743, 0x9, 0x2fe}, 0x8000}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002800)="548cdd39d465bd9269ae3f03f183862bace3826c20b128af25d0f25510fa5f62745ea1fab0ecc875d5cd29f51a92fb1b8df2c27269068ad4329f51e62a146cf6e35cdf03df20949e01d2c6df8b86bb3eac22dbf662d732c288282c92984391830f791697e0bbe8574e79b9212ba39b4a1dc597f22648c0bac8926d917fbd1ee82001e13830595bfba11538fbc676b08e0fc51200581338ff98daef12f52b3d125c112e2fd4b28314e4b51486e67788a62a9eb0aee35afecbfc65762da8dc16145ec30b0f62bc8d2d5a16a43cc8d735d0480bac96d8c23f0ba5bb612ca3ec0b509f847b3396527f3424ebd3ca8824cb25bae2a2c433f2da", 0xf7}, {&(0x7f0000002900)="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", 0x1000}], 0x2}, 0x3}, {{&(0x7f0000003940)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x173, @ipv4={[], [], @rand_addr=0xd6}, 0xcc}}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000039c0)="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", 0x1000}], 0x1}, 0x2}, {{&(0x7f0000004a00)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000004a80)="6ef72a7930b5d3fe632b41f873cefda2b08c81ed874c274552a56dd8cc22e7cec99ebd78b2470ea6906de7b806898a514b36ff72a2f1836cb909229864c3557aad000d13a3d5160c3f8d0b146bd428f540643763210128f6bda66c64aa1b38", 0x5f}, {&(0x7f0000004b00)="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", 0x1000}, {&(0x7f0000005b00)="d9d35d22ebff5f", 0x7}, {&(0x7f0000005b40)="0eff41b7d196a0a1ef79ce80ab5da7085927c416a1e02ec4de16609f7501d7e20aebbd3d34c5df", 0x27}, {&(0x7f0000005b80)="a4c79125e63800567e2bf1adf25b18b16f019b6ed2ae1b0bcd244055850a606d0ac26e777b2e583ea9d148008c136025c742c4c052df749b8942a6e9ddf05eef0e2c2fd7642a74527c1cc0adb7e8295eb95db6aee8ca94babda9a0719b47ad8846db82d6815f3829df201a1516109596e5110683ad4233e4cb2cc35fdf1e1a3e130862f1cd63470655031a68b9b26e51e2b02862ca6096501dc1b077b02928ef9873229bd93fa49c9d329b90930870d2de837b88ed2331878debfa2c37151e4b41183782c271912b5e457cf8da1e9fb26133bfe9", 0xd4}, {&(0x7f0000005c80)="8827bd892fe8d57730d33ef94daf8937e6fdd079dad3efe0252db51c8fe6865a19f2242f68c3f9ed54231cfca48c4e795ecfef", 0x33}], 0x6, &(0x7f0000005d40)=[{0x68, 0x117, 0x4, "9647bf4c1471c52d8febb622595d70fca57b3b724fb9d565948bea33cd7faff559f86823511cb59dc6638d80d98b00c52f2eac132f430df4dcb476e5a9508f5219c7cfc6e6a1768929a4e9582a55836ea1107a3f4c"}, {0x10, 0x118, 0x3773}, {0xf0, 0x112, 0x3f, "6f7cc913da6323ad4ced6933491f5cd4ac938fd34905456424c3c7368d80c82bb127ef4046124dcb1d854b0036a003418ad1b5f2e89f929d897032e41f87d26d0d75b3a033c1193b424d6b341f8420dbf0d73179c02b2a323f6d209e4e70acccb85c36ce90982ac8602bcb4876ffca38ddb1ec0dc7d4814265ca943b7337ea304a0aa4eafbc35a04afec38cde636660d896176336c4abe914c88c92e775a16b0727cd0d60fd38f53ed44224f7bea166ace847ffce6320d08ef5bc5de620b96917487091d1d0f09047fe094b327020282b06e0bb0ec6be1d80f4cbcc8817b"}, {0x110, 0x10b, 0x17, "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"}, {0xf8, 0x11, 0x7fff, "1fd767e4073239068d7af1bbffe237faa81ab5e184746a376f86de68f4f2bdc39113352123e7f469ade0a32f91080ff57e1f11b04c4d1a7f1900cf271f9fc48bf0cfb1154c676aa536910f49168cfa821dcc233d3c8458ee9097d8dd642d9b523d09610f498dc3a5827b82180ffdd1e46482fa8f0dd1658494b1c9a5fc93a63827693d15296a56b32969f3492a4a3585583999381e6627c48a8b5ce32bac37c70f3e273d96f98108535aeeec63c0e7d00e6fee902200d4a7f929082fd95fc00174b4ccbce406248c0975ec3d76d35c76273ff12895bdea070b3352edf1c1150665823a7af9"}], 0x370}, 0xd2c}, {{&(0x7f00000060c0)=@ipx={0x4, 0x10000, 0x2, "518809843154", 0xffffffffffffffa3}, 0x80, &(0x7f0000006200)=[{&(0x7f0000006140)="8461bc2fabf738f5765c5508640825ce66b6f68f4dc3e973cf2f15d29174fa697ac6e0ae233f26a2c8881dd5e3a6b242771aa66b8bf2885b9ad7479a7cd832af28543388c1718a2564f9e0cf379410139099fc8c01dfd10e6052e2c5be4aea3266b61f3adb2c4d157540bb3234ff26404cc249019f049c970eb1dd", 0x7b}, {&(0x7f00000061c0)="d9356bae1976cf0309457743d819552ac03dc6f12f56294c", 0x18}], 0x2, &(0x7f0000006240)=[{0x60, 0x11f, 0x4, "9386d11c8c7c417e1190687acf72093d613c514151f04282b4df394479114fcff800fe8a74854b0ceb4ffd13923ac90f473fc2ec1d745304df6a8e0f7caa8bcf81edd735a4d46965e06c49"}, {0x38, 0x88, 0xffffffffffff0000, "2183fc26c3067bf5d915305f05e3502de3d533b9b9fc08b673b833af79c1486c3f26221cef46"}, {0x100, 0x13b, 0x7fff, "f061b0ee1c9570f419e24dc0405e852747ea73a2a15cb15e8e84e0c395482c9b6dc9a3c42bf173d18a3777470d39b3b26d85533c45d0d9c12eb33da8f5f7ca555bfe13417f23215f62c5073636cae25ab1ec51b61728b1adfd47b89dc15c7dca8c1b6a73ebadd5e8626bb7bbbfe4be539465d14f745cf170ae02ad5840d34907f1906fa9f0160253359c7912637513620add446ec2f5ee1ae64e83e8badb497659a37ba583216af1d39ed080924488964cb1a0f0d3d1ca1ed049218acbeea8b64d13a30cd8d448c52108955136efdc37ede7a5c528ab918e848cede722f8b1f380ea8219651ea54c4259238959fc73ab"}], 0x198}, 0xe6a1}, {{0x0, 0x0, &(0x7f0000007680)=[{&(0x7f0000006400)="a556693f0b5d366eb93c19322dca8f4a3bd05b364f0ef0634a90326a6a574572b23a65b4957d851595e78c320065245178d792a5be1a2181f9d8daaf05defe03c8007557f9236b5ba26a35291cb76ed5a6ed9581a0dbca9df8040614077e51dd356d4d3a48ec8d5ec32d852ff7e0f2f5e43f3c1741ce6ccb7c0d7d727f4854bc71bf32667331a25621afbb", 0x8b}, {&(0x7f00000064c0)="0f5f0d24333fa5e4eaac4837525bdcc5d5ad77", 0x13}, {&(0x7f0000006500)="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", 0x1000}, {&(0x7f0000007500)="a570754d61af3077c36515db5bf4db03c08664430b559a803bb6046210d4c8ef266fd5da23f58010a96a9932e5992f323dcf2c3bf8b347d95983a7349348055144e6ee863923349b27ab338010bc5aa687d931054177ff6357ea537de2905fa755ff9afe2367e161b99d4eb86f89a51b5a773baa1bdaacfe10ddd528dc016f5879568af4148c81939d549638384c3f6b6c126621e44f83453872d7253b17b2c4704e3b12423fbf0e35324ff44b94c515508e67b2443625d9b112130a6ad1fc9db6951e010b388ad1481ce403a3380b068b66e8ba4d9454da8bed5e25", 0xdc}, {&(0x7f0000007600)="520dbad0dc10d1073312f73ac2b1cbc8a2fa114b59f84af0eaa9bf0fc0f062b542ff45ceaa47772f57ea808612", 0x2d}, {&(0x7f0000007640)="06802c6a58c39517925008a668a15d54c9dfbb2c7954d07a", 0x18}], 0x6, &(0x7f0000007700)=[{0xb0, 0x116, 0x3f, "cdaacf1d12db9210a5dd763633464c4976a8e80090d7dab05a38786434294187b146a15b4a35a4300dfaa99e7f11a5edfd21077a22357715237159382865947a3bd149a7f8c8faad1f7a50219b65f56e1ee72c636a8b4667f68934f805c163cae5d6d482d2cc8020a5eb8891e24cde2d28465881ac6f9fdae06db9ec91fc44a0d9ed83e4241c6c1955cf68d3666e2d66c8333ab23b399ddf6a9443"}, {0x100, 0x0, 0xfa59, "cd79186ad9502fcfa2abb19c40a65ac477cac54e63e7004065506777a5dd1bddc28c49f37ec2b9511117d67b12ecb6021d4394aa536b8052685173f3031b776b01fe196ede7b9150b8407b7414d46e137cd88b4e4c1624c313ffa81f6688840e7c23bea5a681fe7c1c860ea4b0afa110e575cd0c005a9708ad22dc42082d14b656caadc5c6e459b94b175b7cb63f10a8f0945eeda9d5ac2628b3256a8bf6fe663c9347345b1de6a523a66a7c8c92f82deaefa78b1a4eadcfc8a18f60f6b29197abdc77bb3229f6fef2900954938e2627a87e1d8ed35a4b42841299d5633cce472fe008b710f8dea55a763c3b54"}, {0xb8, 0x1ff, 0x8, "08638e3ca9f659c11f38977262d16ce4c614ef7476915adfdf394e29d375071482d6d858591e34c606d890a3a70e7698a05bc23aa3312e51f4fb37b5e89302232ae0e5e3e954b9b36195b68cf6529b843576973c267df668e6d4bc73d06bdba59fa1138302c02137a9675f1e1d57d50a3a6ad1325126088d6f179df171e926db96cf951364e3102a437854778aeff22da8ee0952451a37823405895bfbec0954bec41e1494"}], 0x268}, 0x5}, {{&(0x7f0000007980)=@isdn={0x22, 0x7ff, 0x400, 0x8, 0x8}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007a00)="9d0a6025dad267982377b0a12038d062ebd02341ace473b0a74593eb538938bf3421511d9d9f784748638c8dbc0bda52f2b88818311da4731977a41e35044e5be102c4efa778e5af3813a20872eed5a39f808eb924f9fa3d47a7416799e070951c7de271c2852d56fbbc60962e467732398cedb397d4d44480fcf97dc5782f53f80197255a69641bb1c63dd6661a83c353e9fd364775f35b8782773b5dadbd29f3f7", 0xa2}, {&(0x7f0000007ac0)="24ec4372168c42df486d47798be6850c4f5f5e83a83d82e048ec1013b25280edda57438200fc56a8bb4c168226a4d597e4d5c9f2406521ab0981be461950f113811aabb32c85c8d2988d2811b213fa0dee663d6324feda757952e5d79111f3694f99a9d53a5e98742df92f8712d86d26356a6f454653f3aa4d4d87b9b57de907903e2dfcbfa010a2939ae1b0c9803ec6724b9f6ffc89f719b209418e8500bd744e034997c0e120aac7fc7b46d0aa5009f525b478daa303ff257f6d4f7bf749ec", 0xc0}, {&(0x7f0000007b80)="2fd7b095fb2807973d9a9a70451cd16fda0e5536f96a14bf611995a5c390b27a9ff73835d1733ab7c8c60da9149b84909256cfa064a3c37a1c140835cdbad7c4c86b498b2bd2244f83d3d74820e9f8614b8798631a37a18c7b4091be16b0f66dd41b4999451aeb1e3e65a74eb8a3c2ea45a62add3c8ca4a0cf3588398b23da27647776dcb9e730ffb4ae0025ad8651858759cb26dc559b4e49485c7b592b0cbe136e5f69aca7ca78ee640029915bc182d0b0d02d2d8791dd3fb25650c29ebf596273ee42fdfc9268be3cea8373628b2b36517d652eb72774695c8a588040c370f52b0b79c5f10d7795dc49ce58a108b7998a835f78c9699a86", 0xf9}, {&(0x7f0000007c80)="23718d492b297cc33cd0886a3d72bda42e60fe973ec3c3031f33e73cb98fb83710be6319d3679c1241d3bd0778ea32c6c26803ccf143156d391fcf1bb98cb5b422fa4abda3355f428f3a4763faaace2c2fc8f71f6b09d3e26b9b6741cc664599cd4e3ff41dab1ec6a99269db1868f32993eaf4766ace980e11746ee41fd58a01b71cbe73", 0x84}, {&(0x7f0000007d40)="91f7bf4ff889cd6cd0af7f7e62aadcb3d38a771123f6c380c14999c9c49c149bab6e4a9c14d930ce69cab9898f6650f03fb298b8de2b41e5ee03e89e4382cc0778e9799e1304e387ed359768b19ac8949a4c7ebad9820f2dfd048d0e3f57bb194ffdbcdf38277d569747e77d2695f40681f317d7e509a6cfb31ef14b", 0x7c}, {&(0x7f0000007dc0)="22f78c72f9f0ad5e151dba8de0d38f7f1c26108a574120ba5cc4356d8dfb57dfd36596b91597053ace7eaa5c5dd3165c5eb6c44b154b8d78a7a615c6b29a8cd364c034369b16ec64ddbfa947aec29747385f670ea896dff2f4ba7a1fc127f61c9fce0a7333a5dc66d78ab59fbd1a0373e21731be51caf5ae0db7b94565936da2046a824c2b36ab2c7f9f9c3cad50ca8023e134bb3a6c0c91023a8a874447cdf367dea6afc695f7cd0ba1aa42fb144c3478b6e210d617556beee419c1265eabafea35599eb6f643d28f9d91c6d3e4eaadaa43048e1a6d498c1d131110bfcd2910a54e827c7d6f878334db845613969823e2f6a5990a298183", 0xf8}], 0x6}, 0x4}, {{0x0, 0x0, &(0x7f0000008100)=[{&(0x7f0000007f40)="be90c54a09d0600edf741b8fc126507f1e4f38a303afd7bb79e743467ec11923a3f2167d0a3ecf27c1", 0x29}, {&(0x7f0000007f80)="d444021dbe2e7ef38f924fbf6dcd52fe21d523a7d2c2aa28d646ff471d7d4c241032dd8a9ed022bde3e800303790daeb130a7530ef79e5089c96231b78b700eab920be02f2afed35949de748", 0x4c}, {&(0x7f0000008000)="81a08523ebeec5c9b52774d01fbc1256d783103e895268e5c360e0a199e7fa51852ac3b31b7b1f3417dbbe320282a6b050a1d6d37a0df192fc3c66d9efe93718c06afb21484bebef80489482cf0e38902d44befca9c782d6ccced347ba503a8467663ea1035486a43bb55ccd928f7269a9dce430c594a0733208447e754d1ab0aa33ce504041ade3594fecc3694ce30c", 0x90}, {&(0x7f00000080c0)="104be19cbb072ff7d449ad23f7e8963a10ca1d32531c2af1e46e232b810cdb180d98de7c7425ab08425d3500ef7f662442befcf6", 0x34}], 0x4, &(0x7f0000008140)=[{0xb8, 0x108, 0x5, "c93a7eb7cb51f78965f193fb6e454708bf4f838f7d80d200a38e110b2059083a1aff87319aa06561cc90a8730ee0bd1fb678178ab52703124744a6ebcfecdf564a6e003a53425cce8996d1569e293b43457425685449a0208ae948a99198be8a2ac2c411fe260b963852c4a99cccef70e146aeb3cdf9d3c61b78ac033a8ca2812cdf9a16e19d8eff4dc834a2a63331ae4048d5fe2e024c6d708368a104058b47725d3d"}, {0xe8, 0x6, 0x5, "3f5d10bb8ae08b2a97403da9eec0706267e422e9b1601659034f4834068490ab8ebbccba8dae02d7e08e96cd899a1c910da492da3e9ee48b7be0393e02f42ef15592b12a9b89154d03f75a868c9870cc9813615cc9dbc82578d8f4fbe92ddcce2857a5b7cc87cb4401d52158984565ae8b306b9887dd9fbb32812fa9bc1d7554529e1a225dbef29eafa4de34888d286cc0e224c03c75a6967e45ba53d1b411f9eaf1c202fd1c31aa6229885c16a6131e7baf5c19cde34547263832a150c2792295a5a233ba1a3ba91a9bbd2eb1b109c59356ecae73d3"}, {0x28, 0x100, 0xcb47, "c66d1aa564cc08115e1f0ada8b7929446f"}], 0x1c8}, 0x5}], 0x9, 0x40081) sendto$llc(r1, &(0x7f0000000100)="0ac00f8de6ae978114334f3d610ba7802c7358388c07e5024104234c7c455a3655f12060938cbf0281c1265624da56c212bf92dc824b156bac3292ad263a63abb02259e4dde0444df6babac616e76de9f6d76b476b1cf553c4387963e431742f756c2a4fede1c55cc5e10b893d889b5935c687a37150e048da7a6e1b342f7b3d9bad56955542c722dfd04808783e7ef17fa35e531b5811004e8616f33cc4e8b377113161df38946c9fe22d420906fa0048a4507c672cab7913919a738aa4314fc78f075f42664b1943fa", 0xca, 0x20000000, &(0x7f0000000200)={0x1a, 0x306, 0x3, 0x3f, 0x5, 0x5ad, @dev={[], 0x18}}, 0x10) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x0, 0x1], 0x2) 05:16:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget(0x2, 0x2, 0x1) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f00000003c0)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x20000, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="fb316fa367b8", 'eql\x00'}}) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffffffffff00}, &(0x7f0000000100)=0x8) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000001c0)=0x0) write$cgroup_pid(r4, &(0x7f0000000200)=r6, 0x12) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000140)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r5, 0x4) getsockopt$inet6_int(r3, 0x29, 0xce, &(0x7f0000b67000), &(0x7f0000000000)=0x4) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)) [ 476.419565][T26139] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 476.488215][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.494077][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) listen(r1, 0x0) 05:16:47 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000060104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x50) 05:16:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'gretap0\x00', 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), 0x4) 05:16:47 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x40) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000080)=""/212, 0xd4, &(0x7f0000000180)=""/152, 0x3, 0x1}}, 0x68) 05:16:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x44004, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x168, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x42}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6939}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r3 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) ioctl$TIOCCBRK(r1, 0x5428) sendfile(r3, r3, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x40, 0x1f, 0x6, 0xfffffffffffffff9, 0x401, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x80, 0x8, 0x9, 0xc0, 0x9}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)={r4, 0xfff, 0x71, "743d46d5bf749d16672dd86fea69258d50ab202bebd17773df8fedec6560740e6a5db9a1de04a701aca9a817c1f74d2a4345a343e1ac18d82cb1a3c35e39f3ddb048194cfa9265fa18efbea6d7c99aab5101e6e51267602d497546d17f0e35823b52ba47d7ed5aa31d27e52d2c64e18b80"}, 0x79) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x5f30b7cd, 0x7, 0x7}) 05:16:47 executing program 2: r0 = socket(0x10, 0xffffffffffffffff, 0xc) open(&(0x7f0000000240)='./file0\x00', 0x2, 0xa0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @empty, 0x56}}, 0xfffffffffffff398, 0x28d3}, 0x90) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x91fee66729012634, 0x0) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:47 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x4000000000048) getsockopt$inet_mreqsrc(r0, 0x0, 0xb3dcd15b53aa242b, &(0x7f00000001c0)={@loopback, @local, @remote}, &(0x7f0000000200)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000003c0)={{0x10000, 0x9}, 0x1}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4840) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040025bd7000fedbdf25110000000800060069b600000800040005000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4040800) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x80) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:47 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x204800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) r5 = getgid() r6 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000340)={0x9f, 0x7d, 0x2, {{0x0, 0x75, 0x1cc2, 0xfffffffffffffffe, {0x20, 0x2, 0x3}, 0x10940000, 0x3ff, 0x7, 0x1, 0x3, 'em1', 0x15, '/proc/self/net/pfkey\x00', 0x15, '/proc/self/net/pfkey\x00', 0x15, '/proc/self/net/pfkey\x00'}, 0x15, '/proc/self/net/pfkey\x00', r4, r5, r6}}, 0x9f) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000001e0007041dfffd946f610500070000001f000000000002000800a3a20400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:16:47 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0099060104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:47 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:47 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="1f00f7ffc18f45db3215c5530c244104fffffd3b000007114074ff0000000b684b319239b662550a80fa1139535fdbf11cd261f07ad93d1a0599b69312b4648cfbc7fdcb3cf6e19fa47c671a6304850415e2fe", 0x16) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x301000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12671211174cc565051595cef79d2e1402a6d924", @ANYRES16=r1, @ANYBLOB="000127bd7000ffdbdf25080000000800040001000000080004000000000008000500ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) r2 = geteuid() stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xfffffffffffffd6a) quotactl(0x4, &(0x7f0000000340)='./file1\x00', r4, &(0x7f0000000540)="e5dee8905fba3ed8de9201dff818b9721e44cb6f95dd2ab377c08730655fcfebe45cda3c3fd0f7bd10196c096fde6bcffff54881db5a094a9af6dd146d2301f30d0021dbcbf2deac9a3e2a8cd34e8c1d589ba80e378f0c05a01354909b10ee4f1c4bbde409fbe502b70cbbd43b9b184deebe7b78b58ca456284a4542a400b20c01318fec84c8b3a45e12c954db85eef98779a4aa4b641411d51cd396e48a73a0df2d378be1ec6d1a760b3262fdebee3595b14cb55a121b9a12dfd20f03e322f764e2eb4f46cc4320738db46017c2acc53d83c12e7cc3d6090d4fbb5b9de679e5f9235e1648c8f7769d2db673") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800010, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000170000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',subj_user=procem1+@,obj_type=,obj_type=/}wlan1 }nodevem1@,dont_hash,euid=', @ANYRESDEC=r4, @ANYBLOB="2c6f626a04747970653d2c7065726d69745f646972656374696f2c00"]) socket$inet_tcp(0x2, 0x1, 0x0) 05:16:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x21, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x404200) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000240)=""/221) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x4, "7be648b0c3974c90"}, 0xa, 0x1) 05:16:48 executing program 2: r0 = socket(0xd, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000380)="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", 0x8f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20282, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2894, {0x5, 0x3, 0xffffffff, 0x8, 0x7, 0xdbdf}, 0xa10, 0x7}, 0xe) dup(r0) 05:16:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc0) 05:16:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000100)=0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 05:16:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000013000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="6b00000000000000040214000400160037278ba7f0d640c9f15962f14c6a431fc89751069109dcdada4fb82e56fddb5bc04e7abd3b3b4b7dd8c04f8dc951d0d6a486bc69113dc97855ef5d477089fe6471fa46bf3f14"], 0x28}}, 0x0) connect(r0, &(0x7f0000000180)=@llc={0x1a, 0x30c, 0x1, 0x4, 0x6, 0x5, @local}, 0x80) 05:16:48 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000070104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0xfffffffffffffffc) symlink(0x0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1b, &(0x7f0000000080), 0x4) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f00000007c0)=""/194, &(0x7f0000000140)=0xc2) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) write(r3, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x10000) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000600)=""/214) 05:16:48 executing program 3: ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x9d) 05:16:48 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000a0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:48 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101000) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x500) 05:16:48 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x68, 0x0}}], 0x36b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt(r0, 0x6, 0xfffffffffffffffd, &(0x7f00000001c0)=""/76, &(0x7f0000000080)=0x4c) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x10f001, 0x0, 0x10006, 0x6000], 0x5, 0x1, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 05:16:48 executing program 3: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ddbf0d9350"], 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x43, 0x0, 0x0, 0xffffffffffffff87) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:16:48 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter6\x00') r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x100) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) pipe(&(0x7f0000000000)) [ 478.884637][ T27] audit: type=1800 audit(1549171008.792:98): pid=26288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16603 res=0 [ 479.056780][ T27] audit: type=1804 audit(1549171008.792:99): pid=26288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/518/file0/file0" dev="sda1" ino=16603 res=1 05:16:49 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000e0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x600) 05:16:49 executing program 4: r0 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0002ffe7ffffff0000000000000000100001"], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 479.247792][T26319] __nla_parse: 31 callbacks suppressed [ 479.247802][T26319] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 479.255832][T26321] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 479.310297][T26324] validate_nla: 4 callbacks suppressed [ 479.310307][T26324] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 479.348743][T26321] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 479.377003][ T27] audit: type=1804 audit(1549171009.282:100): pid=26296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/518/file0/file0" dev="sda1" ino=16603 res=1 [ 479.509503][T26319] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 479.520875][T26324] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 479.523409][ T27] audit: type=1804 audit(1549171009.312:101): pid=26288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/518/file0/file0" dev="sda1" ino=16603 res=1 05:16:49 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0xbfe, 0x7ffd) acct(&(0x7f0000000000)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00007e0000)=""/4, &(0x7f0000000080)=0x150) 05:16:49 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000f0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:49 executing program 2: r0 = socket(0x10, 0x2, 0xc) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f00000000c0)="1f0000000104fffffd3b000007110000f30501000b0004000204235f91658c995f0fa84a649d5c307ab09a77c975c21ccbf4ec556486035e14bc247ed9e61dc81e02b84e62970c733f4bd627222226f32ae9ae09a79787191562386d97b270043ff427f6e5b47a89b41a4a2e58c3fe92e129ede5a1b6", 0xa) 05:16:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x700) 05:16:49 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000240)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) [ 479.756609][T26352] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 479.777370][T26353] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 479.797916][T26356] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) perf_event_open$cgroup(0x0, r2, 0x0, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x88, r3, 0x210, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x14, @loopback, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb99}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) lstat(0x0, &(0x7f0000001b40)) getuid() getresgid(&(0x7f0000000680), &(0x7f0000001bc0), &(0x7f0000001c00)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'ip6erspan0\x00', 0x0}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 05:16:49 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00bf250ff91c606f8c126a9b796ea3e3fb0c88156bc985076be365eed60182143d00027f48f0fe16b5f7f69b50fc9e68d5219794251ae8842f4e095df8bbbc7cff15006658166fb6f98d04477524208c355dd2397aff55d8c51352d7fdb34842041b63baf98c9cd61f8c5e815debe5aed10f1164d3818d00ba2971f54ae4289f6158b15dbbce4807db22ed6b4ea1a377df5f209284588360c26d0cf34880da700190f727d40d30e47e5d6a3b337f74bc48d32f98a85d6357741f5dab245ad1ad602a17e75c1bd2", 0xe1858bead8b7cdbf) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 479.867515][T26350] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 479.887415][T26353] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 479.983978][T26371] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 480.008213][ C1] net_ratelimit: 18 callbacks suppressed [ 480.008221][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.019746][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:49 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000200104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c706fa7a0a3f767c919282b66dade6f7a659ab978299029c30fdbc196765e8d19a789ee4b958cb6abd175755f83bcb17d952e05fa0dfa5fb94aea904860e85"}, 0x60) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3}) 05:16:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x900) [ 480.107679][T26384] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 480.179711][T26391] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x1cb, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) 05:16:50 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x2b) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 480.255798][T26391] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 480.328225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.334102][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:50 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00003f0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 480.433918][T26404] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa00) [ 480.544645][T26414] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 480.648228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.654092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.659969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.665745][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:50 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000400104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:50 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) write(r0, &(0x7f0000000080)="6db84fe45022a45f43e18801901d626351bf3494c1d96db891a68ac321b065e9b8c94013dba1cec9f1b432fb2e4dfc094cf8a2122020e155b1b3e9312b54baff5755fedbdf8dfba2bb4a6bf14abff2ca7ac26e49c4a165b0faa5649c60b66cc149a55d29529a05a19027d86e48a7a485", 0x70) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39ab}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb79}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) [ 480.828649][T26431] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 480.909952][T26435] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x10062101, &(0x7f0000000180), 0x0, 0x0, 0x0) [ 480.968217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.974060][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb00) 05:16:50 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000480104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x10, 0x6, 0x5}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r1, 0x3}, &(0x7f00000002c0)=0xfffffffffffffe47) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r2, 0x3, 0x6, [0x3, 0x5, 0x1, 0x7, 0x2, 0x5]}, &(0x7f0000000300)=0x14) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r3, 0x0, 0x10000) r4 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80800) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000340)=0x62a5) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 05:16:51 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xa0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/99) getsockopt$inet_tcp_buf(r1, 0x6, 0x2f, &(0x7f0000000100)=""/246, &(0x7f0000000200)=0xf6) [ 481.207330][ T27] audit: type=1800 audit(1549171011.112:102): pid=26460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16551 res=0 05:16:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) 05:16:51 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x206000, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x2) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:16:51 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00004c0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 481.419631][ T27] audit: type=1804 audit(1549171011.112:103): pid=26460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/522/file0" dev="sda1" ino=16551 res=1 [ 481.446900][T26471] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) [ 481.525007][T26476] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:51 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000600104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:51 executing program 2: r0 = socket(0x10, 0x2, 0xc) clock_gettime(0x3, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x20, 0xffffffffffff7cd7, 0x4, 0x2, 0x7f, 0x80000000}) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000300)=@hci={0x1f, 0x0}, 0xfffffffffffffc42, &(0x7f0000000640)=[{&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/184, 0xffffffffffffff15}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000600)=""/30, 0x1e}], 0x5, &(0x7f00000006c0)=""/23, 0x17}, 0x40000020) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x7ff}) sendmsg$can_bcm(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x1d, r2}, 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x7, 0x200, 0x1, {0x0, 0x2710}, {0x77359400}, {0x1, 0xffffffff, 0x6, 0x1}, 0x1, @canfd={{0x3, 0xa19, 0x3}, 0xf, 0x3, 0x0, 0x0, "8de2b966a8ebbfa5573241026295ab0e800e7884b264bbd412f0c89828c9c435efaea6692982889411675e4c01ee5533a1046e6d18e7d409223fb786eb17a3f6"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000100)={0xffff, 0x0, 0x0, 0xea6, 0x8, {0x80000000, 0x8}, 0x1}) 05:16:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) 05:16:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd00) 05:16:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) 05:16:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r0, 0x0, 0x2, &(0x7f0000000740)='*\x00'}, 0x30) r6 = geteuid() r7 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) sendmsg$netlink(r2, &(0x7f0000000a80)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000480)={0x238, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0x3b, @u64=0x1}, @typed={0xc, 0x0, @u64=0x800}, @nested={0x150, 0x4d, [@generic="8654e289", @generic="ee496810b8143d3f4df103a8364ba47dbc244bb6debf41c08563c92ec6ac9e2222d5712824d5f33890498e55a87b82", @typed={0x8, 0x7, @str='\x00'}, @typed={0x14, 0x1a, @ipv6=@dev={0xfe, 0x80, [], 0x28}}, @typed={0xc, 0x88, @u64}, @generic="4f0f25ae182e67cc4f4b75b694b6777392a7d989bd29d664724db01a5b7a70aa65f6597d9ae3f011b488e565e86aaff604b3a6715234dcc7f33664d978b35939f8d352709a3269eecc3c", @typed={0x8, 0x1c, @u32=0x5}, @typed={0x4, 0x61}, @generic="8e28154d4f6146b3ad0ad08634a9ed987aa46103bea7359ceac4e696fb72fa857b423af12d6c55c2238afe219e483b6a138799ad02543f9b993aa1d5f6a036b5449354b67385572031eb853c747ac28665fefeca6bc9a462d56638cadebf5b2fd0a2b816d010537a4788624bd5fece662ea774e464ea922abd41de7b67adbc2f5aba443ab45512b8901afc3595fe564861670a072319b9b33c75b2"]}, @typed={0x8, 0x3a, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @typed={0xa4, 0x2e, @binary="04507fd59214836da83eb184956f50c7ea47305d7e52d2ad570ec4936ef20b26403a3fbb14f98a49d0c051784d2fe4a874f68d93347469eb02ef2714aa8c5a4e08a7f8bf44d09381c2cebb69b7dbbab7196f8ae2031f99e50873b0259d5e559244da7e5ce77170ab03ccadd1b26a063b2ed3bf89c340599982192833850a4bd3af914f2d6687be190e0a4b272af34a745153ec684c7f6495f9ff9da150"}, @typed={0x8, 0x10, @uid=r3}, @typed={0xc, 0x11, @u64=0x3}]}, 0x238}], 0x1, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x80, 0x4000}, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) r11 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x200) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$TUNSETOWNER(r11, 0x400454cc, r12) [ 482.770354][ T27] audit: type=1804 audit(1549171012.682:104): pid=26460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/522/file0" dev="sda1" ino=16551 res=1 05:16:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r0, 0x0, 0x2, &(0x7f0000000740)='*\x00'}, 0x30) r6 = geteuid() r7 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) sendmsg$netlink(r2, &(0x7f0000000a80)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000480)={0x238, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0x3b, @u64=0x1}, @typed={0xc, 0x0, @u64=0x800}, @nested={0x150, 0x4d, [@generic="8654e289", @generic="ee496810b8143d3f4df103a8364ba47dbc244bb6debf41c08563c92ec6ac9e2222d5712824d5f33890498e55a87b82", @typed={0x8, 0x7, @str='\x00'}, @typed={0x14, 0x1a, @ipv6=@dev={0xfe, 0x80, [], 0x28}}, @typed={0xc, 0x88, @u64}, @generic="4f0f25ae182e67cc4f4b75b694b6777392a7d989bd29d664724db01a5b7a70aa65f6597d9ae3f011b488e565e86aaff604b3a6715234dcc7f33664d978b35939f8d352709a3269eecc3c", @typed={0x8, 0x1c, @u32=0x5}, @typed={0x4, 0x61}, @generic="8e28154d4f6146b3ad0ad08634a9ed987aa46103bea7359ceac4e696fb72fa857b423af12d6c55c2238afe219e483b6a138799ad02543f9b993aa1d5f6a036b5449354b67385572031eb853c747ac28665fefeca6bc9a462d56638cadebf5b2fd0a2b816d010537a4788624bd5fece662ea774e464ea922abd41de7b67adbc2f5aba443ab45512b8901afc3595fe564861670a072319b9b33c75b2"]}, @typed={0x8, 0x3a, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @typed={0xa4, 0x2e, @binary="04507fd59214836da83eb184956f50c7ea47305d7e52d2ad570ec4936ef20b26403a3fbb14f98a49d0c051784d2fe4a874f68d93347469eb02ef2714aa8c5a4e08a7f8bf44d09381c2cebb69b7dbbab7196f8ae2031f99e50873b0259d5e559244da7e5ce77170ab03ccadd1b26a063b2ed3bf89c340599982192833850a4bd3af914f2d6687be190e0a4b272af34a745153ec684c7f6495f9ff9da150"}, @typed={0x8, 0x10, @uid=r3}, @typed={0xc, 0x11, @u64=0x3}]}, 0x238}], 0x1, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x80, 0x4000}, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) r11 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x200) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$TUNSETOWNER(r11, 0x400454cc, r12) 05:16:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, r0, 0x0, 0x2, &(0x7f0000000740)='*\x00'}, 0x30) r6 = geteuid() r7 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) sendmsg$netlink(r2, &(0x7f0000000a80)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000480)={0x238, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0x3b, @u64=0x1}, @typed={0xc, 0x0, @u64=0x800}, @nested={0x150, 0x4d, [@generic="8654e289", @generic="ee496810b8143d3f4df103a8364ba47dbc244bb6debf41c08563c92ec6ac9e2222d5712824d5f33890498e55a87b82", @typed={0x8, 0x7, @str='\x00'}, @typed={0x14, 0x1a, @ipv6=@dev={0xfe, 0x80, [], 0x28}}, @typed={0xc, 0x88, @u64}, @generic="4f0f25ae182e67cc4f4b75b694b6777392a7d989bd29d664724db01a5b7a70aa65f6597d9ae3f011b488e565e86aaff604b3a6715234dcc7f33664d978b35939f8d352709a3269eecc3c", @typed={0x8, 0x1c, @u32=0x5}, @typed={0x4, 0x61}, @generic="8e28154d4f6146b3ad0ad08634a9ed987aa46103bea7359ceac4e696fb72fa857b423af12d6c55c2238afe219e483b6a138799ad02543f9b993aa1d5f6a036b5449354b67385572031eb853c747ac28665fefeca6bc9a462d56638cadebf5b2fd0a2b816d010537a4788624bd5fece662ea774e464ea922abd41de7b67adbc2f5aba443ab45512b8901afc3595fe564861670a072319b9b33c75b2"]}, @typed={0x8, 0x3a, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @typed={0xa4, 0x2e, @binary="04507fd59214836da83eb184956f50c7ea47305d7e52d2ad570ec4936ef20b26403a3fbb14f98a49d0c051784d2fe4a874f68d93347469eb02ef2714aa8c5a4e08a7f8bf44d09381c2cebb69b7dbbab7196f8ae2031f99e50873b0259d5e559244da7e5ce77170ab03ccadd1b26a063b2ed3bf89c340599982192833850a4bd3af914f2d6687be190e0a4b272af34a745153ec684c7f6495f9ff9da150"}, @typed={0x8, 0x10, @uid=r3}, @typed={0xc, 0x11, @u64=0x3}]}, 0x238}], 0x1, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r4]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x80, 0x4000}, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) r11 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x200) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) accept4$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$TUNSETOWNER(r11, 0x400454cc, r12) 05:16:52 executing program 2: r0 = socket(0x13, 0xf, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:52 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000680104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1400) 05:16:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) dup2(r0, r3) 05:16:53 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="b30000007df2c7f4ceb734c538094889a5c0b6ae2d70e40d58b365336ddb49e9d8db1d05789d1229604c228dc7c14fa7f4c653da541b8c673916f3458ec96d7e052de56c00cd87000000007cd8ef859aa10ad3ec2131cdd3229fd2d89359abf573673ea69589dcb0a843efe650952d2b44a5a1196c92b1502d8b9e57c6c27bfa409381113d50b83e8dd9d10f0addb9bdd1462b486e549ba3fd776a3f0e04144dad711fd9137a249318fda17dd11569035309792a35e041"], &(0x7f0000000180)=0xbb) 05:16:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) dup2(r0, r3) 05:16:53 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00006c0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x70100, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000400)={r3, 0x1}) r4 = accept(r1, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300)=0x632, 0x4) setxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'system.', '\x00'}, &(0x7f0000000540)='cgroup\x00', 0x7, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1, 0x300}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000440)={'HL\x00'}, &(0x7f0000000480)=0x1e) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) 05:16:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='rose0\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:16:53 executing program 2: r0 = socket(0x10, 0x2, 0xc) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x54) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xffffffae) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x3) write(r0, &(0x7f00000001c0)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x159) 05:16:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) dup2(r0, r3) 05:16:53 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000740104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2000) 05:16:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x9) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x2000000000000021, 0x2, 0x2) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x401, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x13) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x482, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x110, 0x7c, 0x0, 0x0) 05:16:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80302, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x4a, 0x0) recvmmsg(r1, &(0x7f0000009e00)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/45, 0x2d}, {&(0x7f00000013c0)=""/17, 0x11}, {&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f00000014c0)=""/91, 0x5b}, {&(0x7f0000001540)=""/39, 0x27}, {&(0x7f0000001580)=""/69, 0x45}], 0xa, &(0x7f00000016c0)=""/96, 0x60}, 0x7}, {{&(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003c00)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/55, 0x37}, {&(0x7f0000002800)=""/80, 0x50}, {&(0x7f0000002880)=""/124, 0x7c}, {&(0x7f0000002900)=""/12, 0xc}, {&(0x7f0000002940)=""/140, 0x8c}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/230, 0xe6}, {&(0x7f0000003b00)=""/86, 0x56}, {&(0x7f0000003b80)=""/127, 0x7f}], 0xa, &(0x7f0000003cc0)=""/149, 0x95}, 0x385}, {{&(0x7f0000003d80)=@ipx, 0x80, &(0x7f0000005180)=[{&(0x7f0000003e00)=""/115, 0x73}, {&(0x7f0000003e80)=""/151, 0x97}, {&(0x7f0000003f40)=""/192, 0xc0}, {&(0x7f0000004000)=""/76, 0x4c}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/131, 0x83}, {&(0x7f0000005140)=""/1, 0x1}], 0x7, &(0x7f0000005200)=""/4096, 0x1000}, 0x29}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000006200)=""/64, 0x40}, {&(0x7f0000006240)=""/6, 0x6}, {&(0x7f0000006280)=""/20, 0x14}], 0x3, &(0x7f0000006300)=""/4, 0x4}, 0x5}, {{&(0x7f0000006340)=@nl=@unspec, 0x80, &(0x7f0000008440)=[{&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/4096, 0x1000}, {&(0x7f00000083c0)=""/91, 0x5b}], 0x3, &(0x7f0000008480)}, 0xfffffffffffffada}, {{&(0x7f00000084c0)=@hci, 0x80, &(0x7f0000009a40)=[{&(0x7f0000008540)=""/56, 0x38}, {&(0x7f0000008580)=""/207, 0xcf}, {&(0x7f0000008680)=""/231, 0xe7}, {&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)=""/36, 0x24}, {&(0x7f00000097c0)=""/112, 0x70}, {&(0x7f0000009840)=""/251, 0xfb}, {&(0x7f0000009940)=""/226, 0xe2}], 0x8, &(0x7f0000009ac0)=""/157, 0x9d}, 0x7}, {{&(0x7f0000009b80)=@sco, 0x80, &(0x7f0000009d80)=[{&(0x7f0000009c00)=""/146, 0x92}, {&(0x7f0000009cc0)=""/167, 0xa7}], 0x2, &(0x7f0000009dc0)=""/30, 0x1e}, 0x7}], 0x7, 0x10000, 0x0) r2 = socket(0x10, 0x6, 0x5a70000000000000) write(r2, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 483.617804][T26601] Unknown ioctl 1074025794 05:16:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) 05:16:53 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00007a0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 483.696479][T26601] Unknown ioctl 1074025794 05:16:53 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = shmget(0x0, 0x3000, 0x102, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) chdir(&(0x7f0000000240)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0x6, 0x4, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000540)}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x0, 0x0, 0x4000003a]}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 05:16:53 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0506107, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 05:16:53 executing program 2: r0 = socket(0x5, 0x6, 0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xb1, 0x3ff, 0x1, 0x6ca, 0x7}) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3f00) 05:16:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) 05:16:53 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0006990104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 483.938516][T26626] kvm [26623]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000003a 05:16:54 executing program 1: clone(0x807ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x215, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x20172}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 484.065895][T26651] kvm [26623]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000003a 05:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) 05:16:54 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000030004fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000000000, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}}, 0x98) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) getsockname$netlink(r2, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 05:16:54 executing program 2: r0 = socket(0x10, 0xffffffffffffffff, 0x400000000000000c) setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f0000000080)="61e3e3ba7c6888291fdac7b198ff956ce4399462927091414ae39c42ac1b9b2992257ebb0a5a796984a67a3f081d643a462a67544bae77b5902824fd3d1cd4d858689ff731d9afffe8c09d5e70c930a80db91e7b57e940756ebcb321c69308bfa195d3ca0927ac2034c2c7c5af3b35446efd3cc86073b4f6af044746438ab00a548aaf2196", 0x85) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8000) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cgroup.events\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], @ANYRES16=r0, @ANYRES64=r2], 0x24) fsync(r2) fallocate(r2, 0x0, 0x40000, 0xfff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x6, 0x10001, 0x10001, 0x3f, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) 05:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 484.275410][T26669] __nla_parse: 30 callbacks suppressed [ 484.275419][T26669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x4000) 05:16:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x800000, @reserved=[0x4, 0x1e0, 0x0, 0x0, 0xd59f80]}) 05:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 484.462007][T26669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:54 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socket$inet_smc(0x2b, 0x1, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) r2 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2008}) 05:16:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x101, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='syzkaller0\x00', 0x7, 0x8, 0x1}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x80000) r2 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x4, 0x10000, 0x7, 0x0, 0x101, 0x40014, 0x8, 0x2, 0x0, 0x5, 0x5, 0xe94, 0x7, 0x1, 0x1, 0x8, 0x5, 0x6, 0x2, 0x8, 0x4, 0x0, 0x1, 0x3ff, 0xba, 0x6, 0x30, 0x9, 0x996, 0xffffffffffffff36, 0x4, 0x7, 0x1f, 0x5, 0x3b, 0x0, 0x36, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x10, 0x4, 0x7ff, 0x6, 0xffffffffffffae75, 0x100000001, 0xfffffffffffffffd}, 0xffffffffffffff9c, 0xc, 0xffffffffffffffff, 0x2) dup3(r2, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x1b43d048) 05:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:54 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000140)) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000002c0)={0x1a9, "5fe5b38c88609edec312005e699e2eca729ad716c027bce88a640213ae3ecfe9", 0x1, 0x6, 0x9, 0x200000, 0xe}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="850000"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000280), 0xd1) [ 484.622077][T26708] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:54 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000020104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 484.685021][T26711] validate_nla: 6 callbacks suppressed [ 484.685030][T26711] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 484.750914][T26708] Unknown ioctl 1074025678 [ 484.819648][T26725] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 484.856319][T26708] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 484.858977][T26711] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 484.891383][T26731] Unknown ioctl 1074025678 [ 484.919889][T26725] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:54 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x90) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xd00, 0x0) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000030104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5000) [ 485.128229][ C1] net_ratelimit: 22 callbacks suppressed [ 485.128237][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.139799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 485.208807][T26747] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 485.227362][T26748] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 485.269765][T26750] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 485.375498][T26750] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 485.375525][T26747] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000040104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 485.551334][T26766] overlayfs: './file0' not a directory [ 485.600017][T26769] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='K\x03\x00\x00\x00\x00\x00\x00\x00ocs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 05:16:55 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x2, 0x31) fdatasync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10140, 0xe) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 485.672958][ T27] audit: type=1804 audit(1549171015.582:105): pid=26773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir362800895/syzkaller.75o5CH/529/file0/file0" dev="overlay" ino=111531 res=1 05:16:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 485.768200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.774040][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000461000), 0xc) socketpair(0xa, 0x80006, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) bind$netlink(r0, &(0x7f00000000c0), 0xc) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x3f, "0af7b647a683410e0071e681a92b603e200626627df5a31e4a798ff2289e6925b01a4dcd841b3588811ae0d23afe95b19acd536897de582775d37f12cc4314"}, &(0x7f0000000080)=0x63) 05:16:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60ff) 05:16:55 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000050104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 485.838590][T26722] syz-executor1 (26722) used greatest stack depth: 22288 bytes left [ 485.912457][T26788] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:55 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44001) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x7000, 0x2000}) 05:16:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 486.024935][T26803] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000060104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x3, 0x2}, 0x10) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 05:16:56 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r1) [ 486.248209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.254080][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7400) 05:16:56 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000014c0)) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@empty, @loopback, @remote, 0x2, 0x7fffffff, 0xb, 0x500, 0x725, 0x8, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5c4800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x101642, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001480)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000001540)={0x15, 0x110, 0xfa00, {r6, 0xfff, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}, @ib={0x1b, 0x1, 0x8, {"635451c3a3af3a04825aab7012ded7d0"}, 0x7, 0xffffffffffffffff}}}, 0x118) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x35, &(0x7f0000000140)=0x1, 0x12f) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001400)={0x0, 0x17, "ad7a3288af6e36d057737d2965f0f42fcae9a3534924a9"}, &(0x7f0000001440)=0x1f) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r9, 0xfff}, &(0x7f0000000240)=0x8) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000280)={0x7ff, 0x7, 0x9}) getcwd(&(0x7f00000001c0)=""/48, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) preadv(r3, &(0x7f0000001380), 0x0, 0x0) geteuid() write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "706b5adf2095dbcf6e11e976a20d77ea6c3cfefd83a967eb51e1b3f0bc5c361f6d134128416eacea"}, 0x2c) [ 486.346793][T26835] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:56 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r1) 05:16:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 486.506224][T26851] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000070104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 486.569021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.575640][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:16:56 executing program 2: r0 = socket(0x0, 0x2, 0x80000000000000c) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:56 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000080104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:56 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r1) 05:16:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3ff, 0x121100) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 486.888195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.894148][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:16:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f00000003c0)=""/4096}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x4}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, r3, 0x2}, @increfs_done={0x40106308, r3, 0x4}, @enter_looper, @release={0x40046306, 0x1}, @dead_binder_done={0x40086310, 0x1}, @acquire={0x40046305, 0x4}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="57170a600bbda5d9a31604a11dfba223ba4882d0dc64b0442c803445e9a80d448c8034221f868546cf5198a1be6f67aaf553b8eaf53e65960fdf1e03b7f031910595a0ad54f95046dcb106a39cdc84c1f20de182bed8709fbe7ba24c397360dee2014c0f0289953ecc62949ee81d9f7289c4c9753717f2a3723304d033eb3e4203d0ecb27ee391f919219f675459cee67bd17aaa67cc4f27460f6f8e5d3cb1302828188609c1e076e95ff0f8fcf1645a9c3f958ac438fe4273b2b5a2a24690586c5d4e994f78d7c812e10111bcbe15e5cdb48b1d064bd44654f6d543c813606361289b3afac027f45515eb177736ca5f5d52bc66", 0xf4, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000001440)='keyring\x00', &(0x7f0000001480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r4, &(0x7f00000013c0)='ceph\x00', &(0x7f0000001400)={'syz', 0x3}, r5) 05:16:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x9400) 05:16:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000a0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000006c0)={{0x4, 0x2, 0x58e, 0x2, 'syz1\x00', 0x5}, 0x1, [0xffffffffffff7fff, 0x5, 0x6, 0x1000, 0x1000000, 0x77b58c7c, 0x80000001, 0x9, 0x2, 0x0, 0x200000, 0x4cb, 0x5, 0x20, 0x7fffffff, 0x100000001, 0x0, 0x7f, 0x0, 0x0, 0x200, 0xfff, 0x200000000, 0x9, 0x5, 0xfffffffffffffff9, 0x294e, 0x4, 0xc0, 0x7fffffff, 0x471, 0x4, 0x0, 0x276, 0x5, 0x1, 0x6, 0x4, 0x9, 0x7, 0x7fffffff, 0x8, 0xffff, 0xffffffffffffff00, 0x2, 0x8f1, 0x0, 0x0, 0x74b6, 0x8, 0x7, 0x7fff, 0x1000, 0x2, 0x5, 0xb27f, 0x1ff, 0x7ff, 0x6, 0x1, 0x6, 0x7f, 0x3, 0x3ff, 0x2, 0x5, 0xc56, 0x5, 0x2, 0x1, 0x9, 0x7, 0x0, 0xffffffffffffff00, 0x8, 0x20, 0x0, 0x1ff, 0x4, 0x400, 0x7, 0x2, 0x7, 0x5, 0x10001, 0x6c, 0xffffffffffff8001, 0x1, 0xc9, 0xff, 0x7, 0xffff, 0x3872, 0x1, 0x85ad, 0x7fffffff, 0x6, 0x0, 0xffffffff, 0x3, 0x3ff, 0x94b, 0xfffffffffffffff7, 0x4, 0x5, 0x1, 0x3, 0x5, 0x0, 0x80, 0x445, 0x1, 0x4, 0x4, 0x8, 0x40, 0x2, 0x7, 0x40, 0x5, 0x9, 0x2, 0x80000001, 0x3ff, 0x2, 0x6f4, 0xffffffffffffffff, 0x80000001], {0x77359400}}) getpeername$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@null, @remote, @rose, @netrom, @remote, @remote, @default, @null]}, &(0x7f0000000080)=0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[]}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 05:16:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:57 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dda, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x8}, 0x20800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}, 0x10) r1 = socket$kcm(0xa, 0x400000000006, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x7, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffc59) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3f, 0x40000) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0)={0x1, 0x906b}, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 05:16:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/148) 05:16:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000e0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x200000) [ 487.660180][T26938] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x14a, @loopback, 0x8}, {0xa, 0x4e23, 0x1, @ipv4={[], [], @empty}, 0x3}, r2, 0x6}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x80000, 0x0) write$P9_RSTAT(r1, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {0x0, 0x48, 0xe65a, 0x0, {0x8, 0x0, 0x1}, 0x2000000, 0x6, 0xfffffffffffff6a9, 0x8000, 0x0, '', 0x0, '', 0x1, '\\', 0x14, 'md5sumvboxnet0vmnet0'}}, 0x4f) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="24000000260007101dfffd946fa283df8fc4390009000000069effff000000000d00ff7e280000001100ffffba16a0aa1c0009b3eb098753b1cc7e63975c0adb7a6268e3406c0f15a30aa914", 0x4c}], 0x1}, 0x0) 05:16:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000003d0501000000000007000000000000009500000000434bb1d76b4cb9ed0ca23859b6bf000000"], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x351, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x7a]}, 0x238) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) [ 487.756083][T26950] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:16:57 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00000f0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007010423dcffdf000000000000000000000000", 0x223) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x40) inotify_rm_watch(r1, r4) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1106, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r6 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r2, 0x4}, 0x8) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x81, @empty, 0x8000}}}, &(0x7f0000000200)=0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) sendmmsg(r6, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x2ed, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 05:16:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x207100) 05:16:58 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) unshare(0x4000004) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x8, r0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgget$private(0x0, 0x340) 05:16:58 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000100104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0xfffffffffffffea1) 05:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:58 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000480104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='s'], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x1, 0x2, 0x4, 0x7cf, 0x7, [{0x5, 0xf57, 0x7fff, 0x0, 0x0, 0x101}, {0x101, 0x100000001, 0x65d}, {0x5, 0x1, 0x653, 0x0, 0x0, 0x80}, {0x6, 0x2, 0x1, 0x0, 0x0, 0x200}, {0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x100}, {0x40, 0x4, 0x101, 0x0, 0x0, 0x80}, {0x2, 0x6, 0x100000001, 0x0, 0x0, 0x2}]}) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000000)) 05:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x400000) 05:16:58 executing program 1: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x11}, 0x10) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'bridge0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4008000) 05:16:58 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x8, [0x2, 0x8b, 0x1, 0x2, 0x100, 0x7fffffff, 0x0, 0x0]}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x0, 0x1, [0x7]}, 0xa) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x3, 0x2, 0x100, 0x4, 'syz1\x00'}) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:58 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00004c0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:59 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000600104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:59 executing program 2: r0 = socket(0x10, 0x2, 0xc) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "eeb777b0e78ac1182f0417ba887c100346eb46acbbf1c587ec67f153bdb135d9e80f751caadb868a411505e0e50b6b61c4deac27297e12e614b93dcab11187032586ac384b4a3e8ec71c85f0c15089fd62a977e4fd6dc875d769eef18a2a4d"}, 0x63) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:59 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:16:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x50a000) [ 489.325223][T27072] __nla_parse: 31 callbacks suppressed [ 489.325233][T27072] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 489.337708][T27071] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 489.487315][T27079] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:16:59 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x10501, 0x0) geteuid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x78b4000000000, 0x4800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 05:16:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:16:59 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000680104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:16:59 executing program 2: r0 = socket(0x10, 0x2, 0xc) fchdir(r0) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) setsockopt$inet_buf(r0, 0x0, 0xda3663b7e0a70673, &(0x7f0000000080)="4e0ef7911f0fcd6a66ac7cb586260da13f6b1ad2bd5a89071561f1e0489079b634b01801907e3a0706f87fd669a7a9d0485c41eaaec02dfb86f42a15818b01dc8b410d1a8a2c1b5588e49abfb5fb7efef6aa59371ccaedd55a4ea461a1f4", 0x5e) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:16:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x709000) [ 489.850242][T27107] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 489.884589][T27110] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:16:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 489.919726][T27111] validate_nla: 6 callbacks suppressed [ 489.919736][T27111] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 489.924296][T27108] IPVS: ftp: loaded support on port[0] = 21 [ 490.002330][T27111] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 490.061994][T27120] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:00 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00006c0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:00 executing program 2: r0 = socket(0x10, 0x200000000002, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 490.270200][T27130] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x712000) 05:17:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40180, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x7ff, 0x6, 0xfffffffffffff800, 0x7, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 490.390499][T27139] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 490.408201][ C1] net_ratelimit: 18 callbacks suppressed [ 490.408209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.419686][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 490.464290][T27144] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 490.592966][T27144] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 490.592972][T27139] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 490.728873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.734707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 491.048194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 491.054048][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.060033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 491.065825][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.237733][T27108] Unknown ioctl -2147202751 [ 491.347346][T27176] Unknown ioctl -2147202751 [ 491.368215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 491.374030][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:01 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x10501, 0x0) geteuid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x78b4000000000, 0x4800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 05:17:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000740104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0xffffffffffffffd0, 0x0, 0x0, {0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffff, 0x88000) write$ppp(r1, &(0x7f0000000300)="6754a69a0955bbec9396b76db4075b71b6cddd0f4c7cb7826b14618058a27c297df254221e999515166311be2b63aff19fd45e90d2251c5d92724dc115c569db8e20e0958f649e7817f6b9288d73d2db631a8b3e2e32e78dba5e3de182599991ebe62940871241b07f80ec9635229a659b8a93f03d1a32ddec66a02e07bffebfc94f87ee382fa67301006a86a95ba80a274c5dca7fd4b12624cd4953173f459d5bf1a4c9bc24ba79d871106724f6c505935d6744257fd9aad0c80bd97431398c7868d0f305cab7eb83b3b510beb3535cf72f2983d896fb722948b26ef008276784c2efde06984580417eb6e63246009cca5106498edbe2fc374d0cad17ccf3d9c8211d02d7d5b7588d15b7cb28708dd54c9be797cc26d96588170f27f478caac9cef09618e50e28dde41a1fc53164382f9923de7b3b11425e6308f55cc3a3cb0ce6c2adc86884be0de45d1ed8c8c7a5fb4179235eeafc55660bd5765ddc9431d1eeaa007b563a68d571fe971e8e157e100d16c978ba8c07f23cc79fa063b03f9c8f47f03e7d975e9d71d791281ecc7f95808481f139604d01d5e70ae81c9fd058f265d0daeb65c890132dde2e93e15920ad03c9ac61479e0be54fb2089a209d5d3f4cc75e64f4a9c680928740ec2e4a7024b050be5b7cf370a0c2dd5b7e01c2494a2b2749e975f6fc48a80acbf8d4d1baea19e973a4dd62f9143e4ae80372e791271988fa7d06920e1a487ecda8f9b5ba8c4340a2ef9e6db056de9ccacaa0ef81ab1c5822a2f9627687dc7b241640dee55c21ba627283c41a8c574db5911aeb083d6dd72cf0c44ee7254bb0e9f2e49157f56d08d1e0b13a984623de3fdb927e1b35bb19b8aaa9b59ec172a0c6d383afaeafcf9ec846ce611a2b8a04113640ad5d355f38b3120bdd7e2358aa55db52ca2cd268451290437085c24de8fd8eac75519389ed884b10e1cc7d687fe2153a4601f1b648b3f954316e83f13603c83d001793310c4ac07c5f861aaeb31422307a56066e50a90192c360209372f340c81adf789393e3a8b2ad1387593d7315fea4371f16c31484fbd833d0dde97eb052ba80d536b5abbf5c7afa1a1ab09a5463cc2d679b5be0e807b39e8ed7efc1e141b14c378b739d4e5e46a8ebb7ea880ff07062843359e1926a2c0701becb7ba68cb92b145a0213e6da97dc05faba6225aad780189206c4db1097b3b7f01d2db930711379d58a763d563a0bf3b2d66548b8f737d9bf27dc2640f2370fc3f1f8538e5d7eaf35e883c66f9c45243b4f45856e70467113ca73c4546a407728a56e09a66fb0ff8020ada74e5154d2d116a1b524a7b6cac6e8c8749076ed91e3c64c76570c34ac02319efe5229a36d1b0fb429364d0d2e5cb9c6c6d86e8c4dba5f16c451cd099df6acde3060303537c1cb81bfb06dab640a94cd43e5c482fa82314a12e657a6aceff1be7a5d9bfb51bf0c7d60097357849ed326f34d586049cc134abaf1c10b6a2ef9c0d581ce34210618cbf02bb1e5fc9839df1a31def76bc9035889d249ca8dab7d4357896664bf1c7ac4507847a3450dddb6f149c3ac1a40e2cde50d3bfea9a18c73cb6d1ea20c26bdc6276eeafd56ca786a049b0690ea808d9106383a925431d1dad598c78a137ae818492263b9a059a86b078a7a28ac61f0e0507066ada45830bb48034b8f8c3802a842aafe551df852116ed1e69778b110f244234fdd61e48f93722a2f486042baa9d025f5bc044ada786d6f6c553d713c4604d693726c670fcbd2a44691d4f8002a799e8e9f71d3193d11a0e5f27320cf5a3e351201354182dfee35b231eb6a74568468e8595ce5a3eb02bbcc1ffc97c2c4aa6011169890d9a39342d3731efcd0357b3547d769cac7fb53a8f1fed7940969941b0b3a89908be291b7455640993c19573e1958e140b0024f3fcd4732989b2b170b091cd9fab98d137c43ddc6cadb3731b12aa399f582747b7f0bad79ebe89f07e8bb2288da67b6b85b43f258c5089d91869abec5ae237435019fd938eef69ea5024d7813b27d9f359f66802356d4268b28008f4fab1d1bdbdfc6f37fa955bbd8c3be783a987e9f6798edda5a5f1659ab3b6b298c99c0a5e474613f0c523b0e283d94a4f1fcce90d7f9a490808cb6b1a4751d048626dad4203ce4bdba7a5619c0e95f7e2f9280b07b6305b8d399d2748ed5ebecc82e0a077055234425b1b6faad90ad945b9e84a23d3c6f393b0c5bec0af77d4f734267a07c01df212d6e13a497383ed5ce0699085b83ee39c0a325c919f1b66f351e6ddfd8563a4fe871e34f0faed4b648d2ff3a6fdb3b1ef64f15fb349a629dbbbd11acda7bdc8da9ea05963902bc94d293b6680649b32cb392b7d8cac9cea7cac2b981f89742afbb6c1d926fdb41185a42e17b0dab665ee5a3a35716eca59285e1796ee9094b70c10624b923c726aa30dc2ee888fa81d31a3d7f8d2ac3c11542a302832a7e29c86ad7f02c81d5ddbf6b6e64a63ebc0e84b9f47a84309be744fe9a57d62b52224102817d07221b22c15cc6e222e76bbc70f5cd22a8c4cf3e6d7671b3ef92620a8e79e48c26a7cea34dc157c18c31afad8386d05b9710a35cb1df2606e201a9819caa774250b29e69d9b6730e3a44b2a3b4193d989d4315d7a0b8e743baa94186616a8ffd53fe2bf2fba0b7fe4c058a9825ba6cc877b7e808319bfcbe01f63bfb37a6b903c05b45a0fb3e8550b4ffbdeeeb7a8a2f70cb70da165faa8f1a00f8489ac0bcfc5be3c604484846a54b394dfd9348e78574c0793422691a5530bacae2a8f770deba5210098f8d3f7e8cdb2ce7023bac4d567a5e7ac09fb340aa678497fbcf02cc8765d5f649ffba69caee6e60829d637581a32c94a36d8ee2a9a7de854763b0831f868e03faf76c399d6591d245a7d6a8083f22aa727c79d2cdf2be5f3c2a4b78fb6c73476905f5112b88803c54dd804e276202f83fd791fda60092eea9e5c1ee73c4b5484eaeadc6eeebb63a12295128f6d5cf92fff081573e6739705e3e7f4769769283f74349a7cf1dbf0a59fb3cf47c29da08cb29babf6ea128debdd761577608558c53c0109efb4e55653633f2950eb7c895144d9625ccc6dedf0c599e3eb6b8fa56982cf8a2eaadef32093de686164daa353966a6268da1638de6153c368513a52f7cf56854b50bf5e9e8e80d6c0354c4adb54caedc48f8a7aa80fc4132765926e35d54562b56e42ab15b9e86eb9751248db11ca93c5252211e2beebb05d56cf434eee65f09e0451e2d6afb07079a0c3c1099ec60db12a6b112a34bcc9fdbcf65ccdb5e9b625bb874817969a9d8a3cf3d989a1c08883b99b258973cddacc00d3fc263ae4c383c520f2798ae50461f0fabfa46e90673f2410e073ca396685b11f890ffb6e2a43e9a23ba661b51281c38b5000a78f7394a21283d743e8763ac4add27da12eb46e11e4ebc558e32f8782955076b89d7029094dff20fad7653579d21924b975bc07a7f6a82f839e22b71cc90ab1f8f60a35c2c24409c993b3a744240a5d5f164f22c1839993842dda3ee6d2be6bb69b37a4ae1072d9091ebddb758f5cfdc4a9d63dc06d793251b1bc20df7234d42f7e3602c4f3cb572189ad2df5d557cc607b1f475905fc46713642fd64e9126ae094b8fc4ab37b714dbc9c169ba15cbadc95afda63f8dc35e4f99230a2a4a266c9e9f35c9d05070507c36213e79b577885475c366aa0a34e60aa25f5fec91d32fe280e5d01ad7468b49217fdc9d13a6e1a312a3e9841343af134b9ea77dbc7b0d7999a0a6ece95fd4b1945c949f701e060f8a12b1ca5d8d1af47caec5af430d0f6c10914783fcf8a2277cb6bd2d61a3b60940b5ee56cef21b60d67d2927301192dcee8a37b3efc8b167815b92145097ee69372fc10b267e4bd99da7645e5b1bcf90b0d39354e6e770a99a53bc43f97fb6dc08aeb890564d518336fa858fee1a0d62706a3aaad5e3ecb349c28af84dcb7a4baade0e1b8135f3689ea12089828ee37c2e4f95e91e35d9a359e9438b6e0e2c065df09bba85109f2237dd162e57cb085c95a3e65dda1ebf9f821f7c311d978ab2c9e629f481ac0ed767cd82630776842190c82597c82613910087bc542180c97efc613aee4842319240cb7c08adad83528e254a9a96c69f7bb3276e0d4a97c998dbe5691b7e52b97e8a381bc2281a3a1e87c5bc7412e4c9e8a14cbbf571a6ab4ba45cf346ab8596f26d8bc66927b89cbc7d42f6fc5e0b95b1d9218f21b83fd885812d145b6e55e4129f9d8447146b10e5927140f948aabcc33d39f23186252eaad7a1e1e2114c75a392027d114b54f98deea933888265ead7e68e97a72239b16932eae9952dce1ddeeecb9f1ba36d5adaff06fa326c1dcf2ea312e3712f6880486e5a57cf725678b74748566f622977df7098e192e815a28affff261bee3415a5b061aacde10f39cb518006af7e508f6e22e63556ba03b499aa371ad7dfcd8e46160668755c3f4977c0e6c64d7acf8a04feb11c62a56d1e0b53ba7581c45b66de402464d86de516289ecd41a833a73668de95c5c98bcedeefafb8b1d149a06eafd1ee7fc6a908ff6c47f1395dd891892c318467ca9d36dec8624a18da10196baf5066c71a300d1ee150709f4b9cb5a96226280a0dab4307786f242d04651a6aab08544bae76539f2971f2e9354e85914f3c2f25dedab363e25a5f3feeb4f15e4a43ccf0027aadc6c1451fa5d7c8b506afe36a9ed96def35af2a80dfefb381c6820ac01220a0a7e75cd607613e8cef09311c01bf3eb6e2f0130b038c4fdf1905808e392947d039a8e975857f1425fba6861feb0c70a1ddc2739ddc88546ae8ac3a3c3101b69cad6c534adab0ad66c339bc95bbef86ab25d293610462345ba6d5e8058a7ba183349f55d869d8dd5cdca80c7236824ef71d8498381afe5f3fbe69f05ef89a57659aa636bd221bb957cdd1ff67f77637fcbcaa0ff3f4455aee9210859d6c72b00cdec92f83ee42c687936be9d4ab016dd0df78d208ce8de9d3665e75579f33886064c181b08ae6451e9f28e260b4c85e93304c30762df85adbe9d1359c2f65d16471b5d17e10c8579741bddb8d3ac94e1e106fafe2d4316e07a13a87cd07b60d2f41f1c53cbed7e44ac46768f35bb95acb5d6b2486c838f763bb99d0d30de3c07b3c9692257814d794d896e429c1c1bbadcb119f780d2ca14de754e970f9803a4ecfbca13f2cf82bb1c5c39b3136736dd45bdc1f663e4be015e70b9816ed8b61dd23dd19dbb763d46dd3865670f72d53b725cf8f450e75c7116282687e1cf4734e20e8d6184eba6cbfcf2c9ce6845f446b2a34507dc809fb86e613f7f5d07cc26736346ae6ba41c02a78a71f36a9df181d2ada1cda09601721fe71bc1e39836f52e708179f4a66c18119cf2d1b2d58cf573f54613a725c2ff58d4f0ac0d08b716782ac8431af8bd0fc651602ba03fa0308333a181b86fad860f2f11e325455094b3cf1c020821fde13b11360bfd705614026ca50e969b34cfeb56f6fbd3efa2fbe6a86dd17700d777cf4fad5f008ecce83ef2ee0f16556c9c8e322eab129c44c69748c56af1dd4f556448748441fc2ee19846ee7321f1cabbd7847ce5b43671405bbb8a216d76cc8cf1f182799c62c3244cd46d81d57f742ed6364049faa3f0d9d601f3514c412abc2c7e892438a9da64100a476b2909325455bf968dde84aebe1d78d7f2b3e7560beb092a9b3e55717e839c9957f48fead770050aca9b24b525cac70a286a2e6bce3ca0af3e290887a7cd78f40228da9a67ffb0", 0x1000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000200)=""/220) 05:17:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:01 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 05:17:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x740000) [ 491.562353][T27186] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:01 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x37c) r0 = socket$key(0xf, 0x3, 0x2) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000000}, {}, {0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@local, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000000000}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000180), 0x40001b7, 0x4800) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700090200000000000000000000ceb8a0b20157a94e02b7a086b1e707bec9690d"], 0x10}}, 0x0) getpgrp(0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x402040, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240)=0x3dd8, 0x4) r3 = dup(r0) bind$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x8001, 0x60000000000, 0x21b, 0x0, 0x6, 0x7fff}) [ 491.664485][T27192] IPVS: ftp: loaded support on port[0] = 21 05:17:01 executing program 2: r0 = socket(0x20010, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f00007a0104fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:01 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000304fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:01 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) fstat(r0, &(0x7f0000000080)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0xb, @sdr={0x38323151, 0x9}}) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x7) [ 492.041333][T27235] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 492.103274][T27235] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 492.545332][T27192] Unknown ioctl -2147202751 05:17:02 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x10501, 0x0) geteuid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x78b4000000000, 0x4800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 05:17:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x80ffff) 05:17:02 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x37c) r0 = socket$key(0xf, 0x3, 0x2) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000000}, {}, {0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@local, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000000000}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000180), 0x40001b7, 0x4800) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700090200000000000000000000ceb8a0b20157a94e02b7a086b1e707bec9690d"], 0x10}}, 0x0) getpgrp(0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x402040, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240)=0x3dd8, 0x4) r3 = dup(r0) bind$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x8001, 0x60000000000, 0x21b, 0x0, 0x6, 0x7fff}) 05:17:02 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000022304fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:02 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:02 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000002504fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 492.856170][T27295] IPVS: ftp: loaded support on port[0] = 21 [ 492.861222][T27298] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 492.958968][T27305] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:02 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000280)={@empty, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2080, 0x0) readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/108, 0x6c) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) 05:17:03 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000003f04fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 493.155758][T27322] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 493.216924][T27328] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 493.421998][T27295] Unknown ioctl -2147202751 05:17:03 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x4, 0x1, [0x7]}, &(0x7f0000000100)=0xa) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x8a, "bed751207e43a8ee0cae686742487b97c1944a44bdaf20af95bcc51346ecf36be9f3a14ef9b82e74e3370cff0acc43aa40df8453eedaf2d4e0006e769106fab3ff73d3b946b2b9bbfafed55cae9c91c7f2592450274f590fa8b33c91b59173acfa6da7ddfffc6f38b607d350b311833884963885cdc810d73bde7751c46cf02190be85317a7df3a56b61"}, &(0x7f0000000200)=0x92) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r5, r5, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000440)={r1}) keyctl$assume_authority(0x10, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1fe, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {0x0}]}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e21, 0x9, @remote, 0x80000001}}}, 0x84) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000002c0)={r7, 0x1}) 05:17:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x907000) 05:17:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x940000) 05:17:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:03 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/205, 0xcd}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/129, 0x81}], 0x5, &(0x7f0000001740)=[{&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/60, 0x3c}, {&(0x7f00000016c0)=""/91, 0x5b}], 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/full\x00', 0x101100, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x140110}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x30, r2, 0x21c, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb301187d7a92a032}, 0x40000c0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0xa0000214}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x68, r2, 0xa00, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x146, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10) pwrite64(r1, &(0x7f0000001b80)="3b83cc007f875f3be7d54d74fdc703822123fc57f0555c8ed60ebb7761d79324f0df0733cbb8367de96f1b987f7ebb24977ce3523c6c5e39890917da25e74efbe2359498be16b8b87b71ffcac210e1beeabefe80711c5071d171c942b1c162928ebfd8bcbd2249fc928250692acf763a6f163c4393ab0114f164ac3e738582a718f0dfaddc25e24d6a05c770e4927f35d3de301d415017f6acb216eb", 0x9c, 0x0) ftruncate(r1, 0xd1) fdatasync(r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d40)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000001e40)=0xe8) sendto$packet(r1, &(0x7f0000001c40)="a9ea5077f3e0e84831f6cfaa865c4208f2113dd5c715ebfff8640e1e9ba708afde617c69ebe6e01573c48d6dcbb4fda5d99eaa446aa6b1780065ae077510efda32cd0518f1772c857d1bf9d42721ea381ff243b6461618449b89ae3529933802b04770d48bcb9a4a72f0ca8a99e69cad040ea55bacbe652b2aef2d2b71d2d44bedf95f8bbabf55a8cf99b18bdb9780f8169b632cf7bf502428f5e5275aa43bffb0658118c7fe7b449f0fd1faae22ee5a37aeb760f5b4e59a39948d687730c07c1baebc47de06a87fe661047f6b2241fbe9ff0fffb73c8d18ac7ebcd3d52ac8e1", 0xe0, 0x40000c0, &(0x7f0000001e80)={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000001ec0)={{0xffffffffffffffff, 0x3, 0x498e4474, 0x0, 0x451}, 0x5}) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000001f40)="0e17e43a1e0a4af254faffe202a52f5a100f24810c3cac8cac945c466dad30b870bb8477d2630817e4430200f37ab0c8ae7a9098c34d5002e84c59cce5616244ae475549e2a88e4da55edad92613d519d0da00f0a01d33996864ab7e1f8b0cfd435a2522a7bd20d461d9091d5b0a1aadcb485c85b5134b16b5eb2cadea6383a8af25e8f5ebe41397910f834a65e108f079dfa552713cdd1e94a7becef546941e7e8795e50c87cc943424208662cca714eb5ab67f7cd9b6c0ff44630709d0981500") sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7fff, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000002180)={0xfff, 0xb, 0x1, r1}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000021c0), &(0x7f0000002200)=0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000002240)={'HL\x00'}, &(0x7f0000002280)=0x1e) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000022c0)='trusted.overlay.redirect\x00', &(0x7f0000002300)='./file0\x00', 0x8, 0x3) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000002380)={0x8, &(0x7f0000002340)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000023c0)={r4, 0x1}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000002400)=""/47, &(0x7f0000002440)=0x2f) recvfrom$x25(r1, &(0x7f0000002480)=""/212, 0xd4, 0x40002140, &(0x7f0000002580)={0x9, @remote={[], 0x3}}, 0x12) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000025c0)={0x4, 0x0, [], {0x0, @reserved}}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xcf, &(0x7f0000002680)="a14364267d78660658f333495ea064372997bd0a21026f34eaccdb159a62b4cb7fd2bd57ca0ac271087017cd41753bb49b9aef640d833afc40e229279e65dd68645abeca8e0b652966", 0x49) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000002700)=0x1cc7) r5 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r5) fcntl$setownex(r1, 0xf, &(0x7f0000002740)={0x1, r0}) umount2(&(0x7f0000002780)='./file0\x00', 0x1) 05:17:03 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x80) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x5, 0xdf, 0x1, 0x3, 0x15, 0xfff, 0x3, 0x2, 0x1000, 0x1, 0x2, 0x8}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='yam0\x00', 0x10) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:04 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) 05:17:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000340)=""/3, 0x3) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="722f66696c483000ee12c27e5ca6b67f853148de9699835e3d363911b00bb112d65b6cbf4cfae8cfe5825b9d4c4f36a5da6892b44d3c8b6480632140cc0562e21ed07a7164061d97c044fe1c4d9ad3b62e27b1c0783d440971126a4ea30c478c02d6497a030776bfae30b6f53b4e83324a90d8460b7285b1f0b8fd8e03ff5d55cc248d563b8e"], &(0x7f0000000500)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="6e07ca8f6678d8ab8dfd3fdd13790928d64cbc0bacf5e872f3738475b8e4c0c02c6fe8d3abed981e1796aa5fc8fdf24684bc0a3ecb2e8ef261fb9e8143aedabec303b7d53b5901f8296ada65d02783d1fd25f4ecc84e4c95b84516437e2141a5f70a8799fe1b7fd56bfbd38e05914d27b6197fa6e4b0a7c16b1f31b825ca3d594ca2e3ac24eb144c666d52eb6c8ac559e2ebca19328737e9c655e0"], &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 05:17:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 494.271014][T27392] IPVS: ftp: loaded support on port[0] = 21 05:17:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa05000) 05:17:04 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000004004fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 494.600507][T27416] __nla_parse: 22 callbacks suppressed [ 494.600535][T27416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 494.732092][T27416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 495.237641][T27398] validate_nla: 2 callbacks suppressed [ 495.237650][T27398] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 495.251375][T27392] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1000000) 05:17:05 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000005904fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:05 executing program 2: r0 = socket(0x800000010, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00f02ba7886a000178e7336f5e485c80b2487a79a709b4e29b791ed11b403ca12a5801e753a97291b213068f324b0e097c84a58ce8bc46ca93cebc6a449044d45a7e10c9c66d861dddc118cc6e2d6242a677330f9b32ce61f478baca7f320c6625e13d540def052238c3da60383b84b3d9a58ff47a03040177471f15e489cbbb3f398704c83af02b512a9df123a5c4a6eb8c667b9cd113167a", 0xb7) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/204, &(0x7f0000000000)=0xcc) socket$vsock_dgram(0x28, 0x2, 0x0) 05:17:05 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x4, 0x1, [0x7]}, &(0x7f0000000100)=0xa) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0x8a, "bed751207e43a8ee0cae686742487b97c1944a44bdaf20af95bcc51346ecf36be9f3a14ef9b82e74e3370cff0acc43aa40df8453eedaf2d4e0006e769106fab3ff73d3b946b2b9bbfafed55cae9c91c7f2592450274f590fa8b33c91b59173acfa6da7ddfffc6f38b607d350b311833884963885cdc810d73bde7751c46cf02190be85317a7df3a56b61"}, &(0x7f0000000200)=0x92) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r5, r5, &(0x7f0000b58000)=0x200000, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000440)={r1}) keyctl$assume_authority(0x10, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1fe, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {0x0}]}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e21, 0x9, @remote, 0x80000001}}}, 0x84) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000002c0)={r7, 0x1}) 05:17:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x9}}, [0xd973, 0x9, 0xfffffffffffff000, 0x4, 0x1, 0x1, 0x0, 0x1f, 0x46, 0x1, 0x9, 0x80000000, 0x1, 0x6, 0x80000001]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)={r2, 0x100000001, 0x96, "967b4114d97b9bab67dd80ee904ee65550d19315a47305e73cd2edd59cc15da872565b917c96185976615964ead38f1e05532602a297842d45137254ccf822e48d124bee85aa0dea54fc6f08c29a0d3a3e2f4d4317d18566bc5ad55c2110c6521d24d286157c3d33a1994a4fbddcf32ee11489fa56553efa6c67b0f2f63338bf7ca15863a50b4bb62595fb03030668b75f42358cf79e"}, 0x9e) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x8}, 0x20) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(&(0x7f0000000a80), &(0x7f0000000a40)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="66643d676fd753f571f020bbcd42aeb94febc3c91f2b93963a3bcb59814da1c9e80bf16452ebda163c9f02de7cf9ffd5c0354423ae2bc9dfad1127bbdffe95ec028c60eda0674a0936fb246623c74d8d36150931d58ce422b24715fdc6a05dbbbe733b68dd6a5d64c31d644c0f2a9d23ed3767db4131e33db48f77faa7f364c1a088a07cc8627598f8a0ea049183c909dce11eddc7bc11b6115bbd1039e73e9bb25ea28ef43066b303e540caa527c42d702a35a4d8a333d1ca94ef48ce2b88b80b1ed96e3f3ccf03051d9c3865bfae0a4f9b89613940e1d0c1868637ded763cb0fe5fd12327773cb80d3bdf4f3731f2af2f54bebd99b787b7d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fstatfs(r3, &(0x7f0000000c00)=""/130) read$FUSE(0xffffffffffffffff, &(0x7f0000005180), 0x1000) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) [ 495.528189][ C1] net_ratelimit: 22 callbacks suppressed [ 495.528197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 495.539926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 495.575090][T27442] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 495.576191][T27440] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 495.636921][T27442] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:05 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000f00fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 495.802666][T27444] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 495.805016][T27440] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 495.950704][T27465] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 496.016703][T27465] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 496.168196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.174122][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1000040) 05:17:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffdfd) ioctl(r0, 0x8910, &(0x7f00000003c0)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgrou\xfe\x8b4gs,cDr.\x0ee\xe3\xe1fX\xad', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0xfffb) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000000000)) mlock2(&(0x7f00009b5000/0x3000)=nil, 0xd5ff438933b6e90a, 0x0) ioctl(r2, 0x0, &(0x7f0000000240)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x10808410, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, r5, 0x0) exit(0x80000000) r6 = dup2(r4, r5) mkdirat(r3, &(0x7f00000002c0)='./file0\x00', 0x4) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r7, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000001c0)) fcntl$getown(r7, 0x9) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000200)) ioprio_get$pid(0x20000000006, 0x0) 05:17:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000001000fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x240000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x3d, 0xa9, 0xa37, 0x1, r0, 0x100000000044b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x20001, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000800)={{0x4, 0x6, 0x1, 0x3, 'syz1\x00', 0x6c8}, 0x0, [0x0, 0x656, 0xffffffffffffff44, 0x9, 0xc493, 0x9, 0x3f, 0x4, 0x868, 0x4, 0x5, 0x1, 0x2e, 0x0, 0x10001, 0x3, 0x7, 0x101, 0x1ff, 0xce66, 0xa17, 0x6, 0x200, 0x5e0cda14, 0x9, 0x5, 0x20, 0xffffffff, 0x5, 0xc052, 0x40, 0x6, 0x200, 0x990, 0x9, 0x1, 0x4, 0x10001, 0x0, 0x53edc583, 0x4, 0x3, 0x5, 0x3, 0xffffffff, 0x800, 0x5, 0x3, 0x2008, 0x5, 0x7f, 0x3, 0x6, 0xfffffffffffffff9, 0xb916, 0x8, 0x9f, 0xfff, 0x2, 0x2, 0x8, 0x0, 0x3, 0x100, 0x10000, 0x2, 0x2, 0x401, 0x3, 0xfff, 0x400, 0x1, 0x3f, 0x401, 0x1, 0x4e61, 0x2, 0x4, 0x8, 0x4, 0xae7f, 0x9, 0x3ff, 0x0, 0x5, 0x2, 0x8001, 0x100000000, 0x5, 0x3, 0x100000001, 0xca, 0x6, 0x8001, 0x8, 0x450a8ba3, 0xffffffff, 0x0, 0x9, 0xe87d, 0x17, 0x9, 0x7ed1, 0xea9, 0xffff, 0xffffffffffffff11, 0x9, 0x3, 0x1, 0x5, 0xfffffffffffffffd, 0x3, 0x9, 0x7426, 0x9015, 0x3, 0xd57, 0x4, 0x100000000, 0x0, 0x9, 0x9, 0x0, 0x7, 0xd7c, 0x7, 0xffff, 0x7], {r2, r3+10000000}}) [ 496.422974][T27496] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 496.475639][T27496] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 496.491073][T27494] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 496.648206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.654027][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000204fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5457, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x20800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 05:17:06 executing program 2: syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x400) write(0xffffffffffffffff, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xfdcd) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x9, 0x8080) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 05:17:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1000080) 05:17:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:06 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000304fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 496.968191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.974045][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:07 executing program 2: r0 = socket(0x10, 0x2, 0xc) fanotify_init(0x56, 0x800) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) eventfd(0x8) [ 497.270934][T27559] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 497.288195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 497.294046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 497.306458][T27559] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 497.359449][ T8438] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 05:17:07 executing program 1: lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x7fff}, 0x28, 0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x0}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/112, 0x70, 0x0, 0x8, 0x6, 0x80, 0x5}, 0x120) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") dup2(r1, r0) 05:17:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x100, 0xdf, "4f9b31a5d15114330459c168a625f63280d2aaa69cde0b97912e130301fde1d2f47d96041bc604682f63d90758bfa131b39f0900c16e9c34d687e0cc24ab977bfba15346bdaa62a3458a1397549a8802569487b5605638b5b35f7138ea748da112fc3dceaf882b596bb5cd4e7717131e033beb699deb87619d1983ff6aa50356820aeb3a59b3263a927336cfe4f196838f6b231294b9a713a117e14640c802b9e73669eb8879050d8629bf5005a28f9c28454538c89eadb43f81577db569744a86733d11055ab637ac109ca8e1e8539df9bbf3811766bd6f0b9a5404b69876"}, 0xe7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 05:17:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10000c0) 05:17:07 executing program 2: r0 = socket(0x10, 0x2, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x84, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x3ff}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @broadcast}, 0xffffffff}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r1, &(0x7f00000002c0)=0x4) write(r0, &(0x7f00000003c0)="1f0000000104ff00fd435484dc0e29181d4a5d7cd8f456aac007110000f645f3050100080001003f40f3382777eba1ccdc1701010423dcffdf00c51d3c21c5ab6f916ada0e5100bd9f8f1ff6b9113af8b60a28299653c16cb915a467f8c1df9a253f1ebb90b99613e6cd73f110cbe63f6c26d8df1acdf4d715320e191098138a93eea1f1e37380a272f8d912f06fea5b26adea277f6eb0d6d4629f492c4fb34b4a983475f0f17f671873b149edb0237a2b9282a6af6b0b7f36ea69e6829b36abf55dcc9baa34c6d2a727192c5ea3f4ba154b28c1fcebbbf5af3e16c734c089e4cf9439764359b24313393458", 0xd3) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 05:17:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000002504fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 497.652499][T27573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.666386][T27577] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 497.716930][T27581] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000005904fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:07 executing program 2: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x81) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:07 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b60e4b470959d8de2d0ad060103b05fc0fb40367f37b859c6e15773f3ebd9a49d279c15f8647b96b65c658e390939c244cd1027dd3d8a2d23579272225f3b9", 0x3}, 0x60) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socket$inet_udplite(0x2, 0x2, 0x88) close(r0) 05:17:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1010000) 05:17:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000102fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 498.184898][T27621] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 498.252770][T27626] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 498.446328][T27641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 05:17:08 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x446080, 0x1) sendto$inet(r1, &(0x7f00000000c0)="d1be8e78", 0x4, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x8000, 0x4) connect$caif(r0, &(0x7f0000000340)=@util={0x25, "0344a290e455c6c55524c398913b8e41"}, 0x18) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x10000, 0x401, 0x3f, 0x80, 0x0, 0x100000000, 0x2100, 0x0, 0x73f, 0xfffffffffffffffc, 0x9988, 0x9, 0x1, 0x13, 0x5, 0x6, 0x4, 0x100000000, 0x13, 0x6, 0x400, 0x3ad7, 0x7, 0x100000001, 0x5, 0x3, 0x1, 0x2570, 0x5, 0x1, 0x4, 0x6, 0x18, 0x2, 0xfff, 0xffffffffffffffff, 0x0, 0x80000000, 0x5, @perf_bp={&(0x7f0000000140), 0xf}, 0x8000, 0x6, 0x8, 0xf, 0x0, 0x8, 0x5214}, r2, 0x7, r1, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 05:17:08 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x200) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/154, &(0x7f0000000140)=0x9a) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:08 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x1) clock_settime(0x7, &(0x7f00000001c0)={0x0, 0x1c9c380}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'gretap0\x00', @link_local}) fcntl$notify(r0, 0x402, 0x3) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000000c0)={{0x40, 0xfffffffffffffffc, 0x80000000, 0x0, 0x401}, 0x0, 0x5}) 05:17:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2000000) 05:17:08 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000103fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 498.661117][T27653] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x21, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'syzkaller0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000240)={0x0, 0x1, 0x2033, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000900000018150000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000dfa9f8be81f04a00181a00a9", @ANYRES32=r1, @ANYBLOB="0000080000000000025005000200000095000000000000009dbb1466f070e8bbb85bd580f3ee591e9f5e6b96cd98ab0d4400803aec50b434768fc89c5f9587dd485a3715fd08f1f3f8eda6462b9b7312bb05102ef859e0eb287ec7703d04959f843df455c7e7f312368ee74f21cdff462cd0479d16f8fb07d650519e9abd149a38053b7a8ed3512ad31bf2668e658c767228ec43b022ebfc336c3810dc533ab9a29485d30d871faf0f37790000000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x53, &(0x7f00000001c0)=""/83, 0x41100, 0x1, [], r2, 0xc}, 0x48) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) 05:17:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x6, 0x7, 0x8000}) syz_emit_ethernet(0x198781, &(0x7f0000000140)={@local, @empty, [], {@arp={0x805, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="56df23d5d123", @dev, @empty, @remote}}}}, 0x0) 05:17:08 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000105fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:08 executing program 2: r0 = socket(0x10, 0x2, 0xc) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xed, 0x3, 0xfea, "9d0bcf35fd1865ad4d5ce42f5cc5e848", "d2c8da39cba05d051fadc4452c8abba02908b2a70dab9d45e6340fcb04eb40b57d6a674fdadbe23db8146307b803dc31a84115b279982b2f300a6a42d5520caf47b27185b26c40c3afef4cb99539fa8c6cca59425442fe0a25c081c3ddf63138a60f30faca7bd844f769a6bc09a186cfc20d15cbf7ef8eee274779ca641b87a1949b8d6ca01d404ca0efe9688fde1c1137f61c37aea167fb0ab04ea1bd4259e40813618cb1103b92f0d8b231f9805eb5e9d5964e99816545a47403d01bf4c584685c66da50131874b743a889c73c24f4ccf7cb71db61fb03"}, 0xed, 0x2) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x4000000) 05:17:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) dup2(r0, r2) 05:17:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = getpgid(0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000340)='(\x00'}, 0x30) r5 = geteuid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) r8 = getuid() r9 = getgid() sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="bfc12355d041fff79c8d41a5975ecb9b595af087d20f300fe69b870368c411383cdb398ece954d418ddc6712", 0x2c}, {&(0x7f0000000100)="94ff8d7c27275b090b7f128a5471e3c5305b8c9de4c132f409e5629b6f95dae3f9f009d6a190da4df42b3ca54ea10c4fa425232c7f06ac509f5164493fac6814bd0da52fac6e3bdc0dfe57ff96a5f08c2f70fe17f5277655eb2375ac36d7", 0x5e}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000f60000000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="007c2695bba3a8de9b93ea3200000000000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xf0, 0x4}, 0x20000000) fcntl$setsig(r0, 0xa, 0x28) 05:17:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) prlimit64(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0xfff, 0x5, 0x9}) 05:17:09 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000106fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:09 executing program 2: r0 = socket(0x10, 0x2, 0x20000000000000c) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) dup2(r0, r2) 05:17:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 05:17:09 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044308, &(0x7f0000000180)={0x10000, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22080, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 05:17:09 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000107fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) dup2(r0, r2) 05:17:09 executing program 2: r0 = socket(0x10, 0xb, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5000000) 05:17:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt(r0, 0x1, 0xfff, &(0x7f0000000040)="d4a2340e808e9064bd365b2e51538850eb2d3a59c58763821587a4768f195db5a0c92388a18581eeb1d49062de82254ea258a65f9513d2a77eb63b28a4b12ef2f22c2d01defc7ff47fa44a0d1de4dbb6fce860615db26f75b77cc7e5a4cfb7a418c34892b56685d7643ef4", 0x6b) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x40000000002, 0x3, 0x2) r3 = dup2(r2, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000002c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 499.630618][T27738] __nla_parse: 27 callbacks suppressed [ 499.630628][T27738] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r2) 05:17:09 executing program 2: r0 = socket(0x10, 0x2, 0xc) ustat(0x2, &(0x7f0000000000)) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) accept(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) 05:17:09 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000109fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:09 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc5, 0x80000) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r2, 0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0x6, 0xffffffffffffffe1, 0xfff, 0x0, 0x0, 0x4081, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfa, 0x0, 0xc9aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x100000001, 0x0, 0x7, 0x5, 0x3c}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x6, {{0xa, 0x4e20, 0x100000000, @empty, 0x3e4e}}}, 0x88) arch_prctl$ARCH_GET_GS(0x1004, 0x0) close(r4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000001080)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 05:17:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r2) [ 499.888878][T27766] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:09 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xd2, 0x8040) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xd1cc0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/231) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@getspdinfo={0xdc, 0x25, 0x700, 0x70bd27, 0x25dfdbfc, 0x8f, [@policy_type={0xc}, @migrate={0x88, 0x11, [{@in=@rand_addr=0x10001, @in6=@mcast1, 0xff, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in6=@rand_addr="4f8f6ec1a15cc8b1039f95cc4f73df22", @in=@empty, 0x7f, 0x1, 0x0, 0x34ff, 0xa, 0x2}, {@in=@rand_addr=0x5, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0xff, 0x1, 0x0, 0x3504, 0x2, 0x5203d13124a354f4}]}, @etimer_thresh={0x8, 0xc, 0x7}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x100000001, @in=@rand_addr=0x9e5, 0x0, 0xa}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 499.997494][T27778] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 500.019675][T27775] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r2) 05:17:10 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x66a, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'veth0_to_bridge\x00', 0x2}, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6000000) 05:17:10 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f000000010bfffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x30}, &(0x7f0000000280)=0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-vsock\x00', 0x2, 0x0) ioperm(0x9, 0x8001, 0x2) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x40) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000300)={0x5b8, 0x854, 0x1, 0x3, &(0x7f0000000240)=""/3, 0x1000, &(0x7f00000007c0)=""/4096, 0x1b, &(0x7f00000002c0)=""/27}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000580)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[@ANYBLOB="00cd79c3be87ad95a251bb0a4c1e6d4c61981f02091166001ba6aa4baae4a1633beffb68ed412f932bb2680f0610be27efabab61cf1015437381e9e056c1fa619967495f474e4be09ecc8a957abbb72c0f1c094f3accc4bb484b3f27c04dedf5d8cbbf1a37281481e34a78610ec49b080b50649f39feb07bd99cb0fab82f7d489b1412d9d1dda1a7d7"]) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000100), 0x8) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000500)={0x3, "90accb762aa7d3c1b8b2578154a6ad638b1cc5f276013c536c979464f6d3e2f5", 0x4, 0x66, 0xffff, 0x0, 0x7}) [ 500.347164][T27803] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) [ 500.388556][T27807] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 500.427665][T27810] validate_nla: 9 callbacks suppressed [ 500.427675][T27810] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:10 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 05:17:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0xc00000000000007, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd0, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x64c397f6}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0xbf8e8c701633773d) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) 05:17:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) 05:17:10 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000112fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 500.614485][T27810] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 500.659551][T27803] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x121200, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc) fgetxattr(r1, &(0x7f00000001c0)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 500.709966][T27837] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 500.808190][ C1] net_ratelimit: 18 callbacks suppressed [ 500.808199][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.820059][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:10 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0xffffffffffffff01, @mcast2, 0x100}, {0xa, 0x4e23, 0x3, @empty, 0x800}, 0x200, [0xe222, 0xdb4, 0x4e4, 0xc2c0, 0x9f, 0x100000001, 0x5, 0x2]}, 0x5c) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x75) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000400)={0x34, 0x0, &(0x7f00000003c0)}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000280)="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") flock(r5, 0x4) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x80, 0x0) 05:17:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) 05:17:10 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x4, 0x3}, 0x14) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000400fb0b00000000006ede9179790016fbb3000100000000000000ff0f00000000000004000000000000005f0b0000060000000010000000000000ff0f0000000000000900000000000000"]) setsockopt(r0, 0x65, 0x10000000004, &(0x7f0000000000)="c8d63f23", 0x4) [ 500.903284][T27837] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7000000) [ 500.951589][T27856] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:10 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="06d27586e1c0dff5a359468469c75ad41880b3e851287e33996f9b70cbf45a178376efd2aacbc6cdea5e86a9303b04d472bb5cd97f354a38a742cf7e62b57f4e7578b8cacbe40218d0cf6bc4c031d16833960772a2f7e21b752e038f3cd9d949a6f09837c49e8f3317315b79aeb5ced2c143b3293241e8f101bca3982d50c408119b19e5150fcee4e4fd04cf795b74d48d8c14cab97888ec3ade45def560f13e4ca82f49e1a61c8097da9d769b705e8ec0a6496a5f22c13c4c243d72d9adc82bc2b23e76ec2027db7f759664fe0e067d4a"], 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x200001, 0x0) close(r0) mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) getpgid(0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$usb(0x0, 0x5, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) 05:17:11 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000159fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) [ 501.128183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.133982][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 501.186869][T27856] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 501.448196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.454092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.459956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.465721][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:17:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7000080) 05:17:11 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000163fffffd3b000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20000) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:11 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x40) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000000c0)) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x4395, 0xfff, 0x400, 0x3ff, 0xdb2f, 0x81}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000140)={0x1, 0x1ff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x3]}, 0x6) chroot(&(0x7f0000000200)='./file0\x00') chroot(&(0x7f0000000240)='./file0\x00') stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x10, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x81}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@euid_eq={'euid', 0x3d, r6}}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '/dev/cuse\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/adsp#\x00'}}, {@uid_lt={'uid<', r8}}]}}) fchown(r0, r4, r7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000007c0)={0x0, 0x100000000}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000840)={r10, @in={{0x2, 0x4e23, @empty}}}, 0x84) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000900)={0x80000000, 0x107, "b785a85a14df0e21755ca81109e78fce434d11350a80fff1702b39494b1344ad", 0x0, 0x610, 0x81, 0x9, 0x5, 0x9ec, 0x1, 0x7bc, [0x3f, 0x4, 0x3, 0x8]}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000e40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100420}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a80)={0x344, r11, 0x700, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffffe1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffffffffffff1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe23}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0xe4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @loopback, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @rand_addr="617b3122dcee67dbd9f04e6bee7579d5", 0x650502ec}}}}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29c462a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x664}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24000000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x344}}, 0x0) r12 = accept4$tipc(r0, &(0x7f0000000e80), &(0x7f0000000ec0)=0x10, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000f00)="427291952a86910adfeca7addbb38eba7fbffc023079a284b2294934d164ee19b3d49c4245962c8c58c20f6d73cbc234e56c5251153078c4cebb1dad025c29", 0x3f) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000f40)=0x0) ptrace$peekuser(0x3, r13, 0x9) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000f80)={0x2c, 0x4, 0x0, {0x6, 0x7, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) r14 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/dlm_plock\x00', 0x4000, 0x0) r15 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/vhost-vsock\x00', 0x2, 0x0) r16 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005740)='/dev/vcs\x00', 0x412840, 0x0) sendmmsg$unix(r14, &(0x7f0000006e40)=[{&(0x7f0000001000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001080)="38a519de0d0aec7684598f593374db8ab3eaa40ae147", 0x16}, {&(0x7f00000010c0)="8cc4a8f2f761f378", 0x8}, {&(0x7f0000001100)="ab00bd1071a3efdab93339cab2e15a2c0e88bcae10e352557f738a1ba95362a60dde0fa9c0b31236faef6b2fb3be329158ff979e6c23d3836d114a541438af0827b5ed036a26c70d23b64469f643dd2083bb62cb71396590b3f25ccfcdddab51da0b298c58208d4439928da98ba96151bf09440171ecd58b545aa7ff02c92915dde427286a3c311aafd32f636e5e083a3f6dee119df4b1c05c9edc6aba014aff5e08cfbe81430ca3c2ed6fc9f58c00fa975af42b1c39acfecca87ef84ba27b12bd868a3a39c3ad76d5fec1951fd47239bb16a184ea55f44a5031e1", 0xdb}, {&(0x7f0000001200)="7a7bb05a82f21708e393a96ab9527ff67a62a94b4edd34958046aba7ee1ecb2b09ab4d64d437f60669d8", 0x2a}, {&(0x7f0000001240)="003c01bdfeee5f9b01313ef88798edc7b112c6eb8b6186df02504da502cb0c6afcdff56983661ed7c22c9590731dfaafe0278ffcfc874b66ee60f4e9e6145b4ed432e7b01573888576a4d1bfab7cd3891a56c3c78cbd4dc8a698d6ff559e471875315b61481653e6e53d", 0x6a}, {&(0x7f00000012c0)="d479de70022cb2f5fae8fd923350659c7933c4f0a13bc8c5ebf7a1bffb0314fd03a0a2bcc65dde1a16691b9451df67425586256d7599eef2ac39bc5d78010208a6f266124da8b64a2f69bee345cf0d4841113eab85a3648a7f31", 0x5a}, {&(0x7f0000001340)="1f2fffc8ea2f3959ed8f90e6bd72cb9c64ef40f58ad49de5d1bf1497d9cd329cb6ffc0652f11ee02d9a9debed4ab6c09e18f28b7d0b51a7bdd4b4068cbe0b15f82c562fb4e6a94a21e496e67ce8af37bcadc1734dadece60e1ebc4887a18f2cc8d8d5ed9ab23a2a1f8d4778d5295", 0x6e}, {&(0x7f00000013c0)="efc3e7f98462cbcb99dd438d856e7b249cdbdd754fc7ef86c25b153199f71993ac78dfb69e3cfbb1f0d51479fcd989eb2c7fc82962c1c894026f2726fca7994f48e34a3fa9912e34bd0bf491876ab506d4d3adc388d9295143ef7bd9fa0be5c31037b4480998ffa47e62d578348dceb6701a35b255f24a20eac9fed6c5147d06463b9b339cf1bbaff97553736b2fd01a5b62a3e8104075aeb9426fa75abc899f39ded3f74e9d976227cffdd5cf10c04d244bded1f48e9f2fd01d1c", 0xbb}, {&(0x7f0000001480)="75a85ac2add5f8067a03d44138b300c8a5b5df5bd036c801bcf7ef09c7f2051a750df89a60bce38969155805840953744970142d48155ea3f8db5d9c1f0b6c30fbaf2036c993fda3981c5b7dc3dc30", 0x4f}, {&(0x7f0000001500)="019a6ad518508ed576e74218c47b75e4fc6ee148758bc8ad85b1bbb132ca36121a4466a667b002e63c525bf47c4c272eedf78c322541b73218688efee8283d29c366ddfa20d0202a3045565b80e75e9eede82efb98bac0d967b777004f9edda56e8d0b3e62605cc6303bb09e1ecd64cd0b0f614e27874eac68011de5bc022666601ab57aa49e1d6ea4f45e51059e7f36b6d49668d9b27c3d74a53911", 0x9c}], 0xa, &(0x7f0000001680)=[@rights={0x28, 0x1, 0x1, [r1, r12, r14, r0, r0, r12]}, @rights={0x20, 0x1, 0x1, [r12, r1, r0, r14]}, @cred={0x20, 0x1, 0x2, r13, r9, r5}, @rights={0x28, 0x1, 0x1, [r14, r0, r1, r14, r14, r1]}, @cred={0x20, 0x1, 0x2, r13, r4, r5}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r12, r12, r0, r1, r14, r0]}, @cred={0x20, 0x1, 0x2, r13, r4, r3}], 0x110, 0x8800}, {&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000001840)="52b66da737d66041c52c27f68989125720531cec411697b34d355106a3f5a8a6a17716266660f315a1097d5056fc5e63f21794d6c9147383e0b8d32d8da09ec9a3149207953dfd848fdbacab527344d50c5b0e3bb3b241bd1e5b5ee1fc03528433cc5237eeee8adc95ef3321ac8b1de3ddd1b83c3f31f6d5a7b4a1d5462e0218a0f6d3baee1fa94073657ce96da3f08bcad039a4e1f8faeb565a9f536de3950a6d82ebee4aa1e5c7588178b2ebc213a14b8c98563fe008695c13d4098b35c634f02e1bdb2e7c4dce84f4aa5a7d444e9ff83932f89fd7a687", 0xd8}, {&(0x7f0000001940)="05c72234b8a98f1042c97f15d528a57b2e2cfe0321cff406cd195a923d385f30d901dc6b77a4f0ced3faf2875ee18fe7e86a7be9b489f0d53b0b05e270a31353af4535f21474060f1f13a877b268c7d9ef24119a9c05f27db5a69c16c7ab0ae230cc9371039d037eea9667b1b003556de827031cdc02bd7eb3f7bccd7756931916d3df95c12ce51f1e8c2b6442723243a5902d5056302a6298cfa1edab49a5d081c6cd0d8c1ef7102c76e43fb75b37aade4c3fd442db97cbc39227d0b2f89018c05d2593e401b70e438bdc69805131dca0d1b0dfaf5cdccb2499ca669e3278710ce0c5d8f2536d56bc547a270026a8f0ecb49e50b3b436d3ca6f41a69cecca6972ed6cef136b6c207ad253646e2988dc264053ccda74cde81526f66dc0358a0267cbe60678f4abbe02d913d45d9bb622b81a8411e860b5e838058410d5a18b0a45fab7182e6935687ef39b52b7a9662343cc9551833b8e92657182f3220cc6d3acc2ff8a3323ebad395bfaa57a60ca4be4358cc16082d120cb03663d03358b6321a1a0dc6f936f64b58a58fe93a47e8aa39fe637b61448d2613523deb177c339e69b38d4f2cd4650c8f9c2b78fb4c7f5277d253100a4b3ceda41e9681f702f64377feb0977566e9f61008fab608ea43b6a33a2faa0400ff2c2f5cd9a87dcb012d8a32335127baf13ba1324a6fb8e669a1e98fda9b6c30baa96ee4b50ceb4c77e361bb7b7f0aa88f0c1e91982190169b3d716ddf7bae4a5110273cd3fbbc9c9dc4a09d65d395d5fbb33b60cbec541ae3ded29de8751048c01fde2e27d30706fc0aeede1b802167c9016b4525294ca4ce68889485610679b2e08559a232bbe086ceb65004efa124cd05ce587581bc787f5ffaac5205a2729b8c793ee37ddda90a34cc0a004655051a51bbd8bc41f931d74cd9d8b54655f69ab6fbb6cc8a1a6f82dcfd992faabbc2468e60aacd5477951b35df735d5d9e44bfcf6650f8a639996f8c2bbee29cf03229e6441f3996b75dd178c3b9bc80b34d421961ece0702f3a7ba0f4ac9642786602e7eed590f0dba2055a306f479653cdd48e25c00cff0a15ee760eca68ac8aed438217a2d02ab065ea6cb76eff99288764c83e8b9cb7aa9192a11fcaac2f971f2e89cdfdc4e90eca569adfbe985ba16298454fd1cabf13eb3ba1eb302d0dbbf5b4856780ae2a3d9605c744c3e956d38e94600585aef3f5f33bed4f4785bc17d8816005cba094db39a2eac3f31dbc2c8fb61f75352488ea6c9efc0e6b13e1405e62c92db674bd394fc48bed0d288651b398aaa9fce6166ab9e626e84b5b9be9bc8e79f0b0d237208ca3cf9652a16363a4f89da69fdcfe20e4cfe755c8269f9c4928457f00b8aea2de47b2d4f7c4faba024eea1cb7ff6cff6d8ffb92d180b5b7b998aabef1c61ac807d4b5af58180797058c163a2cc0a87d0f306f1dcdae647ac8da641a5139084b7978565861da62e7b7cae7a0ae34c72da6a9625b67f67500028d74d139419591fe5835db3f74a020963b4de6979642a41ff7e0dd030fb00692ae39779a4183957d8d1531b5cb893e76af237a1c9d8976a5797782b042f40f629ab3019da74f0a9120bd5b1ec323f678e8a8ace9b75d21690e538829d6b3822832e180311178a3ce4b7189e6d0343a007e40e755898bc4254aa36a089d49fe1ac4f3efdf2632bb29226ecb6dac6215ac9d03c392e38e27a75b6a1fab42528820bab6e61c1199669044ba83b7ddc90227d59174528e8657bd1303ccd53e2a0fd463fac2d909f8aec6aa69d45827e6ac426084518b7be08a4ad4d24edef2d3d9dd83ecc10781483d88450fe26b2b3ca92a8830c512f76291bb0594053afecaa5119e1f06da44ec150f2f7d1c17e8b9b2522bef51b1b970d01daf4cd27181ed06237e2a23779861e4a96a284014a9638deb20d3f984994b9983e39bdfaa52566681f8b6d64a375dff611220e672596b7b643ac94e9e5551d0ad324077f74e5a432502b69671c2c6277803de02107578262a6d82c34ae02553df7026a1a6f49c39fe95d5c1857fb711c9fc8f77436f70d8928ada899ed32c25f71661b65129c43aa71ca2cf6427bec7da821f5d3d577ed24e402ffc1aa50c06058c4315a7992e2774e10347f91fb7d61c38f010e56b8fdd987f1df7a8ff74a284fd92a52ff401933acc514533c29c6d3e0a7b24e0325678c27b3a7cadf5b22d0d7f9ad818fab785d17007417db19a30d96dda8bda35b8dce40bbad706473459a50ac24eaccda0635afcdad127cc7178b4c34e94fa7918f29249b856f4201571151877e5ee79142c585f3b25328cd4c501ea3bfdba0d4a0e3169a9650b11650498c36d88ece7597df8e90c028033f74028e31d8ffc977ee07e72e95e3cb476d62f58d0e111c08c1ac453e51d04de8592e0e4a1ec6d302302d9120fe25f1ef66c8b417f4fba376ed373458c7830ededbd56a461807985204d234fc98c86c14927c62e1a4923f0e997052fd0610d8348ca51771639f5ebd33e95b5d858d184d3ed10cfa308be3f699aa29c6eed1ddbaa9dd4e3b8f0519219be304e8fe438c1ea43b8982a166732ca87238951469e476c4261b7f352b5d20cdf6b62f459d004095753ed2abfc9f4358d30eece93e0fee60b040eef2a668379f2c3df5e565d0856cc5d87122d97ce52f6868f1abfe83c6dadb624fae3012b124eb499144e2c952e8fcaa5ff76ec74a26bac506073a9f736743405ef857196a9ab99e84abdbc010414ef75c59f01e9ada26ea8a650e69e99103047a8e58a755e673b985d79a6506809867cc44c4eb3a6b50b9fe85a29ad0e677eac27f1a925b2d30e4c842acd82be8aff972c68cec3c8454fd9e63b5f4ce8c13ba4302abeac17040497e32b4132e7283a7828cd3e8215c1c46b876dd888a6ade9a046e6682f17fc257d260dc04a01a1b436aa0a1a25ccb0dad31df41bf789b4d5d7e5577dd61508d753756bfb9a5d61deb4ddaafbd40971c06ebafd6987da2580540e101b49c1de0c4ed6778355a16af896b41f1e7826a4bf15248218f97584d6c8abf25ffe471561b10bb8a59a696b1d510d13edb8b0f3cebbda820fc6d5f7fd9531c9ac95519667672766bade40db8ef6549c4311f9f4a874c9728a2d79b8e83e1ab0181adc3fec170f9a810c1fbe38b83d976eaea1b6b666cd80068b1579e3b26a7e5988c1d81ea4f4e36b9eb1a73aec3514d8f2a3bbcc1a4f145ec4d2e76e1d1729003db436c8292812efc613082a1c8541fb4ab6db67e9a4f7f9c6d5c81cec64860d6184fed3d45dd68ccef521ef58f0011dc7028b31a1e556ebae07585625c7138f3a62fff0946f94b5651f5fe2e0110948677d1a38a7b482ff4464aee8f4fed386cf029f37a8b78c723d74eaf5335cbc5f74e4647a7b3bf4533df3765eb19705a1283656f33f095d44033d3e1cf0ef13351a757aaeb30799f011ecdb2310b3b2e5ea981c56b315ba86191e39d51844fbbde222927535fb1865a0e954da6e20bb2fbd14cdd3f6db268ad0f9c73ffa5ba28e6b0152bef6d6e7d6eea9d5e333ab4ec280ed564fcab4ea25250ae02fd33956f30be47e388f189eda9212e5bd1a61b6ab82ae3da406c7fb1562d9c25d33bc2902ade012ef7e8a1eb178e6535fc2f21fc749a1f273b5635b4861c06c44d138a349a416808ebc2e87839b2673de174a9936d09a10c7c5ccb2e9aa3906ff828e95e7478fb2d9e6cfbee1ae265af4130adfb56f6b71b21bd2f5c5e66c9f2701c22d65ac80d70abf06801518db5e9b4c19b4eb677109e190890c3e54efb7ad08bba13b7de9013a11332544ddc80315f2585cf94a235cce242ef3344d73cb9000cbaf96ff6c687b11a07f32603eae8dd33860458fc03ee14bad8e6e071bd1fb9e7d3f334661c3d2f888e41ff055c08febecbb90d5807303cabf7c723059c726e04789077374ac022a5cb4a10b2cf885619ce5ec44924bd55ff5d37d2b7d91ec01b6a4d8957756b27d7942288f2bb20067e3c433eeedcc39ef190b2ac1371f1b8d5a60be68f05869414579d66deba42eaf5f922c1b8c2535739f9a1635325150132c239bda8c662b06da2b77cc81971406ab8ed3ab8e57ec01f9bf74f4a650677964f61a6c3ad36b6713ccccabbe898b8b97cf8eea9b54bb6895835f0a4acab78b4d378bfde2a2abc6e774aa35bd35dd741c4aeb9e6dd9a599a5e88a642daae3370ba0b466645c0472b72e3798fc6cb09ed4426e998e9401329e22bcb74b33d1da9f87e529f43aba1d4000cc617d7a8382a42e6769ad64f2ec55dcf75d3e62b17eff11d616403f261b54af9e5f1b7cd7daa33d739f9fcb6f17d4e2cdcf34f210da5d4ad81ee71781d0785b74567058000cccd661ed535b4d8d93f42312566bbc5c1a722f4541acc300c6eff9d4971a42b6dc2ce1abbf40231e2b7a9ee14e0b8757f6429e1089b4b44e027a2c291aff7bb1c9c7b64a18206cf301ff8e518eeedac02fbe3cb3be7dc66610bb385b58062369992c4fcc6ebe98ceb25c2e9d07f35ac42ee173a57b1a10d9e0191e857e28d202148408160eaa687889d11ed34cacb85c0a03827b5137c075589786b0bf21cdfe06b1002fd81677d7788d04a438137e82cc39feff70994307c2b33b9815d67feb8f7aef5623d5db33197e55ac192a734f33df9c406ad7763611aababf60546519cbe86bf9631e53550e98fd121aab8d938a3a2ceff81add0f9717430c6db2d5493a92ca984dc8532f6ed66280286be68d4bf01cd3a13653d661b3f478d2e6479917ab57afb85567828d4920439bcdfa8a4fd3905657c16a8fc2dc85bbd9c37d143de297306c6f14aa218f95a9caf7013266a26d3d90ca9de6452a8eba138f56ce9463ad1a8ff85cdf714b7c6f7a63937dca47854024c7ffde3888ba1a412692aa565b0cffcaa09da064065e50e6de3c0e35b05e848c39b14294019da07a50b363eaddaf10c33d39ba24dd9c3d1126ab32f4212d4af3437d8ba43528b32db3af16425b248a442bf1d89b11cd8652cd61cd130b68d208dfacb2b7c3b412e1e69e8f8a1f7dfa2a10712c1e9c1ed86a538b60ba805ec05577811a734621e97edb4a51e5f8d3bb83f94d7b3253ce9e303f8d64d12fccced2f7d5a3202b47dffabbee8aabb359ca38a422b9b3691132db945546baedc197eeee60cc321ba83bc073a8adb7c3733011b6e93f6280abbabdfa9dda6f05f17e47ee4f8d0595d615f1db03ce08c88fc088de4831ea684cd515cfeb6130b3b8eeb742f923bf7b101379bd2a6faaabe3449047d62b58d77a0815c87e98fce47b96a48efea02a903f7940628005d5ebfa66b4e93cb33222531c9f4520e31217816d8e89935a656d38e4433480345f43ed9c098c122fe7c2d220b68887ce07b5f0afa454f5e1f1b9a73baf34cf76412b21778c61482693c696f0cfaa4298831c9acf31fa85d9b3a55cde0a38419221caa036d6cd4f099787ea6a0cfd5e069bd4e84444c701003e6debd474b02b1cefc075e094ae3aff1185c750fa6dfb125a37f3c4a1beda34546e18718740be213f16e724b632437f552f2dc2e74e0722d7d4a36b4afec68056b59d097d9343d87d29ae4f36ab1dae6368260e71d8584fce25ac3106ecb4b9e5eed12fcb5d68f31c886371441ed5867cefbebbd174377a333af24b15fad7a907de9343cb82dcbc7b8424d7f5b939102fc039fa704194e6b833198b2142df71edc0dc76abe603b556cf220155eb6914a5e1cca347d6b25a7be4940253f96a5ab8a1dd13575922de2904b5cb50320569e8500a8e09eb42f52", 0x1000}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="0571471a0af0e052ec1f1a6b2846b0d0f4d34efa4ada85ca55259c63b6e79ca4d55c9727d9d080570ae9e87d", 0x2c}], 0x4, &(0x7f00000039c0)=[@cred={0x20, 0x1, 0x2, r13, r6, r3}, @rights={0x20, 0x1, 0x1, [r0, r12, r0, r1]}], 0x40, 0x24004000}, {&(0x7f0000003a00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003a80)="b691a5ba223f7acd4f0f08792d1d5499e235e5839f9b6ccba0619d86b087cc68817c8d4875c6a5372972253e19f276cf9fbe7e09f5c99343bda5de55d5b6646751", 0x41}, {&(0x7f0000003b00)="6b6350b4256e574abff8810f87cbf46fbfd2c42f6feb677097e10036999058275586a5c18756470153c56c311c5739d4730ba757a28a8314bc03bbe811c694c3a23acd7bd1e5037789970c251c69d081ab5393", 0x53}], 0x2, &(0x7f0000003bc0)=[@cred={0x20, 0x1, 0x2, r13, r6, r5}, @cred={0x20, 0x1, 0x2, r13, r2, r7}, @cred={0x20, 0x1, 0x2, r13, r4, r5}, @cred={0x20, 0x1, 0x2, r13, r4, r5}, @cred={0x20, 0x1, 0x2, r13, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}], 0xb8, 0x804}, {&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003d00)="740f6f6d6a50797dd40942d801eec35a2ae096981a0b04a3b5e9fdf94d24207c078d35a41634817b538d76090c24b60962ea80ae7107d60c35f6535b24038f9d800ed058125a11fcfdf3bde0822f6be7748c71283f70ed1f7fa3ff176d768fdbf30c9a575d56e666ea5db3cfb45a926613d619faf6b88ab8c8b594e7163d1dffc552fef72afaf2a27591be47af07d0a3631dd7a541f4b00050221439039b52", 0x9f}, {&(0x7f0000003dc0)="72a47fcd4aa720222306307a9d8e89637b7bd47fcabc48e6f2a119cfc83cd7c9bda7eb81bc4e98db20704b263445476ed6c280fd9191668ca05770415425576c5ff4d9f29cce9df3f4f19320016e030740f7604ca0689e3a7928166651fa6a577a330d5b3ec8941948c8bf2df01e8ce814ca4268d82ae12ae9848e93937d7d695a64e729137e", 0x86}, {&(0x7f0000003e80)="96db820aa31ba3fa014577d2072cdb59de8b89b2fe7f298fb7d8e32c1526286c22fae281989249a11416b83866d1b3582432bc66bf53d7dc264eaec738df", 0x3e}], 0x3, &(0x7f0000003f40)=[@cred={0x20, 0x1, 0x2, r13, r8, r3}, @rights={0x30, 0x1, 0x1, [r12, r1, r12, r12, r14, r1, r1]}, @cred={0x20, 0x1, 0x2, r13, r2, r3}, @rights={0x18, 0x1, 0x1, [r12]}, @rights={0x38, 0x1, 0x1, [r12, r0, r1, r12, r0, r12, r1, r15, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r13, r4, r3}], 0xf8, 0x4000080}, {&(0x7f0000004040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f00000040c0)="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", 0x1000}, {&(0x7f00000050c0)="46fe461b5454147269ed0c238f2cd43c1b550bc2916826f5523918cffc36d06a9848e519ad4c0185790c0ca1337d84b8af0e0f1b604a3417596b1fb4d83fe568d1b057db88f52734b68b261be234ef4e7dc3abbf16eb0b788e9dd48901b4e9c0abf4f74edce32c7501307e81c7a63bda1495449bf00ed0664f8f8c900a3594152cb5880eb4cbc36f60eab0e8675ef8f02028bd3718b54b3aea8ab9a56895639067f1c68013dac223cec840a76f674b152dbd5452061a2253dcee9cae5b471d708848ebf03aff4be5d98cc1fd0dc24d38532a39d99f5214c90b79bf0774dc7549a0cc09f98dbd", 0xe6}, {&(0x7f00000051c0)="28e3e2719e46175c129e1b368d05177116ddf3d964e45ce9b381835c44f663154248e7ec8c85fddd9e72331e8a3fd7e3e5552a44abbad021adf20a936f747d8c55b88881495962ac75e58828bd5a371d651676515b31125492a642955160fa7ab8bfc6129b877b3fe83eedd365fc20994fd83d3b9042a1b3434718117c3b280f67f3ab476d35e5d5324a077a9ed40d73b3a6f64f40df3c8a53deb456a9ed8443a5d5c2", 0xa3}], 0x3, &(0x7f00000052c0)=[@rights={0x28, 0x1, 0x1, [r14, r14, r14, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r13, r6, r5}], 0x48, 0x20000011}, {&(0x7f0000005340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000056c0)=[{&(0x7f00000053c0)="3bd88388de16fe353d007fd7268e1d61fdccd8ac1cb7b661ff398bd9dc8df174c3c59e2476cfc92cb364df41dcd63253f7df8cb126a6d10b70f6ed68ac768066cb85c8bc01d794ca56bbe4723290eb1837f39c5e76884a35ba24ae9ceec957c90b67fe306675ba31af85d232", 0x6c}, {&(0x7f0000005440)="2682ce7a85049241e8d8660ea67368690fcd5ef7bf05d88038718e612737efe118d8cd2ebb4cf8537b244d197f54da74d3f98f4b996f3ffe8ac046f0635aae01e9e402c402a8ba0beb060bfce09d4371a7a24f3707d120f83bedd9fb966a538372bcb061340f956c1b7944ab46f6945b699ff8e6336e", 0x76}, {&(0x7f00000054c0)="96d2c00a4b5dabeb60f5d1691af5d7fb97b63d435b74f6dcf1d12e7523f71a6c645d44d6be4ff7cdfda3c94909f2f0c1580bc9bf7f95f569772a892cfe22d2d8b4db27288837d50fe44b0e8a15b1ce14128df0a13fe998808c4a09c68ac5f9e6d47c6fad6f2153f6af6c52d2b68e94f31df9e4c854a32e322f94063b7aad16504c2b3a8b90c82e3b25f51b7fb3c3bab194c5c71a", 0x94}, {&(0x7f0000005580)="fc24606dedb9221d81bfbb4b63d1b71324dfef0be9ca9948f5b6fee41aafb8393b7a8443134374b5aeb341b330f5a636a5e64d22f2dc04915f843affaf2a6d4a896524eb03ef7c1f080ca05ad51dd8d3b44856937e20e39d3463fc40ef41b2c0b85792e3ab3b89344028ecf7523d45d43ba5294cc5e7c43a1519d97796cd4fd8ddff0bc2027fddc72c6c50379d7f13c9c8504de33882526c64ca263f96a5464bfb3a396482d2f7f5333d217f9575ac5ad9ba66fd2a46c351540a32967a9edf829e2ac5574f964dd82466a400fd3923ea49854436e82babef6ca0f194560fd98d8ece33f430e9b4c4d2f39dd00a5672052cff0740", 0xf4}, {&(0x7f0000005680)="0e1589d8051719823cf101c41a914e7cef6e167407a4f14c59ecdbb11193938b2d8d77ad23f8da521ddfaaa8ac0dc05e", 0x30}], 0x5, &(0x7f0000005780)=[@rights={0x38, 0x1, 0x1, [r12, r12, r14, r14, r0, r14, r14, r14, r14, r1]}, @rights={0x28, 0x1, 0x1, [r14, r12, r1, r14, r1]}, @rights={0x28, 0x1, 0x1, [r16, r1, r0, r1, r12]}, @rights={0x20, 0x1, 0x1, [r0, r12, r0]}], 0xa8, 0x4044081}, {&(0x7f0000005840)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000006d40)=[{&(0x7f00000058c0)="4fa04cdb7d5689343f44c509c3f1b1018d4fee91213d0f4e2f421d9002fb0716468e8acce637e4779b598c72020ae65b92192d48cd4bfc7b629b555181989462c5badacd000434535d67b2def69b0eed6f6a288895372863314c2248ca", 0x5d}, {&(0x7f0000005940)="871f0c9db72dc5cd6311b3b224b2ba7e178551acc7911d28df329f96d10ca6dfd330175e451dc99990a3593eb89a417261f36357ff1bede3a0bf9545d3355bb9663f90579fe1cbc6fde7dc93d46e923e4eadb4a502c2aa067598f6aff1577eb6fd5cabe1119a8f46a9fc4d7f3b5b6f3ba5", 0x71}, {&(0x7f00000059c0)="bc231e65822ff68471c19e62", 0xc}, {&(0x7f0000005a00)="27c9ee57fead4f0c99b4bf1241686f3cf85129feeb3cab4ca9e279097c6d9af102e0c4951a4ff6180db33e5d52d2fcfa2595e353b37a02961a14f6872b9f6cd18dbce6945fe47c1b41f7a7fc04506a79d3522a6dcda24748f913f39f3d6a6ca6bc1600402d64176027451e689fb938c006cc084557468e76c867cea02506f1a61a8a5951bab2ad3c905f3f0d5162d378f878683f5861ef3f402ad2d6b2596aa23056703d2ae93d963e466c7dbd8a6f01", 0xb0}, {&(0x7f0000005ac0)}, {&(0x7f0000005b00)="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", 0x1000}, {&(0x7f0000006b00)="c3f6c3577e9a56df466a8886292f13fac3ec8e15bf22cab85c105b6de796edb0a257d6a05f008ae75736785f441f31f4a53afe042568d194dbdee21951bd99628e94d609b6ca835a069ad6c7b1e10f692ac79ff2b2c7c75edf19f12fac4b6d788c6df2410bbabbfeb15782d83ccc9b77b3b5a1ab213dc3d411abbd7525aa0d1bb4149f5571207743fda30a075e7c5b43f84dbc503d78240e5d7b8649ca93ce95cb85846c6ddf8f744beb256f9724b02efef4736a", 0xb4}, {&(0x7f0000006bc0)="5ef0e7cd1571d6913bb37efa0315c5d1a90e45d4888505884ae934d793f55eb3dbaa622de7b0f43e1089afd1ae63adf4a20926572dff47834659ab5fecac84b2ba6a", 0x42}, {&(0x7f0000006c40)="8de971078a9277585611e2aac81ea1f5f22368b95404b194d3d357035a909509e18df234a5beca345d8b7f8a227f7e6e59b3584719dc010a53c0d182bc6206c4fc04cc6c5ad2d1bfb95911330128ab0d076f535eac3aad575d2ee86a2f3caa7f4b32cbb97dcb497ff4cb20f6c4c347926d3890b195a2209ac735b3e92da73a16babc7ca92e41470d8fa58880ac08bae52c3062d5186e07a5f45ec288dcc507083debb8c2522ca4b97b0d77c785562b4d9589ca1d302745c6fd9fd0dd9d8a", 0xbe}, {&(0x7f0000006d00)}], 0xa, &(0x7f0000006e00), 0x0, 0x80}], 0x7, 0x4355665c975f91d1) [ 501.768260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.774121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 501.800615][T27881] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:11 executing program 2: r0 = socket(0xa, 0x80007, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000140)="1f0000000104fffffd3b0000071100a52c5bff7f0b00ca15d60a95074dc9cac9d4430400020423491e8dee4d000069670000002000000000", 0xbe) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@rand_addr="cb342257c2bb2b7f0f5d4b1cbb0c4f45", @mcast2, @rand_addr="4078a66f309fb19c0bcba8d646f9431f", 0x9, 0x800, 0x8001, 0x100, 0xffffffff, 0x80, r1}) 05:17:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) r2 = dup2(r0, r1) prctl$PR_SET_FPEXC(0xc, 0x20000) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000040)=r3) 05:17:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80408000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc0d0000", @ANYRES16=r3, @ANYBLOB="200628bd7000fedbdf250c0000000c0009000800010007000000d40004000c00010073797a30000000002400070008000400cd0c00000800010013000000080004005100000008000300ffffffff3c00070008000200050000000800030008000000080003000100000008000200090000000800010020000000080001000e00000008000100050000001400010062726f6164636173742d6c696e6b00000c00070008000100200000001400010062726f6164636173742d6c696e6b00000c00070008000300040000000c00010073797a30000000000c00010073797a31000000000c00010073797a31000000006800070008000100ff0300000c00040000000000000000000c000400ff0f00000000000008000100000800000c00040001000000000000000c00030003000000000000000c00040001000100000000000c00040002000000000000000c000300ae000000000000004c0007000c000400000000000060b514080002000200000008000100c60e00000c000400ffffff7f000000000c00030008000000000000000c0003000600000000000000080002009e0000003c00020008000100080000000400040008000100c600000008000100000000000400040008000200090000000800010008000000080002003f000000180007000c00030000000000000000000800020008000000"], 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="230000002d0007031dfffd946fa2830020200a000a000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 05:17:13 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd59000007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2000000141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4229c735a23a8429b785808820d79060c11bb28b0fc8f4f1862970fb6809586692b6d9730f280b232c98ce2294a946a858611de049eb0724"], 0x38) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 05:17:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8000080) 05:17:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x2, r2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) 05:17:13 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x9, 0xd3, 0x8, 0x2, 0x10, 0x2, 0x20, 0x3e, 0x400, 0x8}) [ 503.279820][T27970] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 503.291508][T27974] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x800000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000080)=0x1ff) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xbf0000, 0x0, 0x5, [], &(0x7f0000000140)={0x9d09cf, 0x1d, [], @p_u16=&(0x7f0000000100)=0x2be}}) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x2, 0x3}}, 0x2e) 05:17:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023cb6b1919dcfc0534feaabe5af74b7123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 503.339607][T27977] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 503.344692][T27979] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:13 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b020007110000f30501000b000500020423ca0200cf", 0x1f) [ 503.426705][T27987] input: syz1 as /devices/virtual/input/input1274 [ 503.496994][T27987] input: syz1 as /devices/virtual/input/input1275 05:17:13 executing program 2: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[]}}, 0x0) socketpair(0xa, 0x2, 0x60fc8000000, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000240)={0xf041, 0x2, 0x2}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x25, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/37}, &(0x7f0000000240)=0x78) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) r3 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x8, 0x80) r4 = dup2(r0, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x8) [ 503.553791][T28000] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x9000000) [ 503.631346][T28008] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x10000, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000340)) syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x89, 0x100) fanotify_init(0x18, 0x401) socketpair(0x10, 0x80000, 0xc6, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_dgram(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r2, 0x0) pipe(&(0x7f0000000180)) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={0x0}) 05:17:13 executing program 2: r0 = socket(0x10, 0x2, 0xc) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2f9c7d891dabcffdd3feee9f96550ead", 0x10) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 504.039293][ T27] audit: type=1804 audit(1549171033.952:106): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir965307962/syzkaller.OBYhXq/590/file0" dev="sda1" ino=16658 res=1 05:17:14 executing program 4: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000140)="85c194505b52df4121fed995ab10f28d73e718f27cb5cb74990fae2d662d07ff7d2d57324504605105b0539ac634e04c0ed599ace6f8a62c88e6cbe1b0ed78690a89e7d5c7b90a3d563b1e04ea60e3eb3141d6f88215627a429e5880013438f478002317556f912cf2b40e2ed5b7c3d4ae5e2c8fa50be109a1be847c061f312e285ae933086b") r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$adsp(0x0, 0x200, 0x100) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r3, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) 05:17:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa000000) 05:17:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x201, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x480) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x9df, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x401, @mcast2, 0x4}, r1}}, 0x30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r2, r4) 05:17:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b030007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x5, 0xffffffff00000000, 0x6, 0xdf, 0x7f, 0x40, 0x40}, 0x1c) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) [ 504.167370][ T27] audit: type=1804 audit(1549171033.982:107): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir965307962/syzkaller.OBYhXq/590/file0" dev="sda1" ino=16658 res=1 05:17:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000a80)="1f0000000112ff00fd435407110000f3c0010008000100010423dcffdf00dd12d5642d6ca47b4dd2e1356191f40498f2102667971364f7884c9f0becd3ca0aafcb1da4000000000000", 0x49) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x80080, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x23f6, 0x3, 0x10, &(0x7f0000ff9000/0x7000)=nil, 0x9}) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000003000)={0x0, 0x79, "bed61712e01627700204c88b9dc002d78642db86cb5222bf02de506b707ec27a7aefc1cf35013ae1e0f0cf05410c0fffe850210229dadca15926dc88c73cf0d3c4a43a3662e5fdaf0bc7a9d893c4f969ddf47ae9895335f1a7a5b47c58d6a978677e6071fb7ef74378cc9eadc7f299bbe87f8462d32d8cb399"}, &(0x7f00000030c0)=0x81) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000003100)={0x0, 0xffff, 0x30, 0x6, 0x7}, &(0x7f0000003140)=0x18) sendmmsg$inet_sctp(r0, &(0x7f00000033c0)=[{&(0x7f0000000a40)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="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", 0x1000}], 0x2, &(0x7f0000002b40), 0x0, 0x800}, {&(0x7f0000002b80)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002bc0)="16fcc4c6079e5ba4744edfec3e8bb5b4c73440e860b5586fcd10dfd97beded721e6aa47a36be285f4eeea25e2d25182fa5b97275b67748496422e9e6d0d3dc66ef91a52b8c0f565912aabfae8c09428c8d4fa23741acb54e1eccae6732c3b929e56438dc009645af6902fb98042b4dd39d32e02058", 0x75}, {&(0x7f0000002c40)="bb825175e6082155b94181e6b5fd701b64ca5c3328504c96846d3ad6d43713f7ef862a9439ea159655ad7948de396cc2eba30ebc3f", 0x35}, {&(0x7f0000002c80)="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", 0xfc}, {&(0x7f0000002d80)="e65495079d06548e44911c160debef778ddbbc4315eb881b94c16b2f1e4ead4a8609b60b05676bde112a9729d1726b59e33099aa8b6783ff3ba5a0c84fcc499b218bf82dd59325647ef46c9b17355dffb7d81e647364567addb0d4c14487", 0x5e}, {&(0x7f0000002e00)="03708aa48f5d75a4f378afea06f90a78645e4a6bc4e124007bbd710fdf5ac98b0182e9532f8804c26f8ef8669bbb62ecbbefae8f3f5497bd12cf238fa007ad5710f5adb8b9bf2e71101c458c216e", 0x4e}], 0x5, &(0x7f0000002f00), 0x0, 0x44044}, {&(0x7f0000002f40)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000002f80)="638607349527886c38bed153bbd4c09e700873a513af758e3ec868b9401284ba44cbe892deb5147df113b7b398ae", 0x2e}], 0x1, &(0x7f0000003180)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xfffffffffffffff8}, @sndinfo={0x20, 0x84, 0x2, {0xe4, 0x2, 0x5, 0x401, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x20, 0xa, 0x101, 0x3, 0x86, 0xffffffff, 0xfff, r3}}], 0x68, 0x8001}, {&(0x7f0000003200)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000003380)=[{&(0x7f0000003240)="438b14e3ff9a851f2cc4e470156ed53a711d341c", 0x14}, {&(0x7f0000003280)="1701d39f9c64ba1e000a21da40fe42f4deddd1ae4d93a0db8f341327968eecf3dbca4f33fa009e85c2ed2098d770515d5c2c8caffe1c8bc0e55df7ec152898c83485d6a348619d44796c380f14c9532e35e2209db2c50c6886106955b1924836157eb4ddfa2fd87a078ca3bafcbe8fd5d83f5e07c059a9b30c1f28c1c7c7936404c4cc825b18fd3adcec1f79098a8c6b712265c3a1ecce373881b43550f9cd6de2c215d12b8c218f4c0ef3cecc1811536690e3d0be01c8c1", 0xb8}, {&(0x7f0000003340)="ac61b4f218b8a674b1a21f8d60fdd5eaa8d13e7dbe0a0c4b1c8384b196cbe320067541b53e593f716717048066f98f2a0cce", 0x32}], 0x3, 0x0, 0x0, 0x90}], 0x4, 0x4000000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) r6 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0x0) syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0xfff, 0x200000) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000680)=""/189) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000001c0)={0x0, @aes256, 0x0, "11a07a360ac88279"}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000740)={0x0, 0x8000, 0xc96e, 0x0, 0x0, [], [], [], 0x6}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r6}}, 0x18) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400)) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000640)) accept4$rose(r4, 0x0, &(0x7f0000000a00), 0x80800) sendto(r4, &(0x7f0000000380)="b6f8c0b069f442f1813e2552d92fa68c14504ae3be6da2efb9cacaca870838fb745aca30ae4dae7c1b42f7d40b25bce4b6ecbaa7805138ea5f289e419648182130240250d5c51b02e4dd75cb8e0217a15c6cd31751c9da89342e89cff563b2dcf7b483733e30f8ae8892cc1e07ac5532d31185a2765931874d0d", 0x7a, 0x44094, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x48d, 0x9, 0xfffffffffffffff8, 0x7, 0x4, 0x3, 0x312000000, 0x101}, &(0x7f0000000240)={0x7ff, 0x24, 0x83fe, 0x40, 0xe1, 0x9, 0x7, 0x5}, &(0x7f0000000280)={0xea2, 0x4, 0x8001, 0x0, 0x7, 0xfd, 0x7fffffff, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={0x1000}, 0x8}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x3f, r7, r8}, {0x0, 0x80000001, 0x9, 0x7, 0x7, 0x4, 0x4550e82c, 0x5}, {0x8a1, 0x80, 0xd5, 0x2}, 0x6, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in=@loopback, 0x34ff, 0x4, 0x3, 0x10001, 0x10001, 0x0, 0xc3}}, 0xe8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000009c0)={0xb, 0x2ee, 0xfa00, {&(0x7f0000003580), r5, 0x39d2ffffc}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000002b40)={0xb, 0x10, 0xfa00, {&(0x7f00000034c0), r5, 0x3ff}}, 0x18) 05:17:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = open(0x0, 0x40000, 0x100) ioctl$TIOCEXCL(r2, 0x540c) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0xfa, 0x0, [], {0x0, @reserved}}) r4 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r4) 05:17:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b040007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:14 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x40000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getown(r0, 0x9) 05:17:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb000000) 05:17:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000280)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) dup2(r0, r0) close(r0) 05:17:14 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b050007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:14 executing program 2: r0 = socket(0x10, 0x2, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x800) r2 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x1800) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0018080000000000b70000") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180)=0x9, 0x4) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x5) dup2(r0, 0xffffffffffffffff) 05:17:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffe8c, &(0x7f0000000000)={&(0x7f0000000100)=@setlink={0x2c, 0x13, 0x311, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) [ 504.838159][T28109] __nla_parse: 23 callbacks suppressed [ 504.838169][T28109] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 504.880618][T28113] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 05:17:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3a, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x7, @pix={0x80000001, 0x5, 0xf777735b, 0x7, 0x8001, 0xffffffff, 0x8, 0x10001, 0x1, 0x7, 0x2, 0x2}}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) 05:17:14 executing program 4: r0 = socket(0x848000000014, 0x805, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000040), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) [ 504.961385][T28113] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 504.994604][T28109] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 05:17:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd000000) 05:17:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") prctl$PR_SET_TSC(0x1a, 0x3) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffc) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) r3 = dup2(r2, r1) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) 05:17:15 executing program 2: r0 = socket(0x17, 0x7, 0x3fb) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000140)='\x03\x00stem_:object_r:etc_uuntime_T:s0\x00\x00\xb3\xf3\xae\xf9V\xfa\xb9\xf5k\xc9jQ\x94q\xdb\t\n\xadN:/\x9ey\xba\x93\xee+\xc2\xa9\xd9\x19\x95h\x97\x9dg\xc0\xdd7\x82\xda\xc3\x95+{6\x19\x14\xca\x99P\n\xa2\x0fq\xa2\xad\xef\x94\x04\x93\x93\x99\xf5f\xea\xa9\x12$\xeaufJ\a\xc9x7\t0\x83\x84\xe8\xc9\x7fH\x98\xe4\xf9\x03\xd9\xb2\xa2\xc1\xf1I\xa4#\x1e', 0x85, 0x2) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) accept(r0, 0x0, &(0x7f0000000000)) [ 505.163738][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:17:15 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000200)={0x53, 0x1, 0xf47f, {0x401, 0x20}, {0x100000000, 0x713c}, @ramp={0x5, 0x3fbd, {0xfffffffffffffff8, 0x3, 0x3, 0x4}}}) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x6, 0x501000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') lstat(&(0x7f0000000640)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="cc70943b8c0a9d287b77b9e13a6ab805784067000000000000f31c90414ce5225bb7a709d97c89d408071a78b18ecf418027a5b7c208f589bca11f71d4a348608bf96db88c2549219ea3292a18e0ba781b060365ff49b769bf6ac0a461a192d14d6f403e942149a6fc858e8ae280a203100a7696406cd4d96d266a"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x7}, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0x211) 05:17:15 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b060007110000f30501000b000500020423ca0200cf", 0x1f) [ 505.288399][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 505.359256][T28157] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 505.392003][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:17:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x100) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xc9ec, 0x200) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) ioctl(r0, 0x6a5c, &(0x7f00000004c0)="0adc1f023c123f3188a07013f08726abe089c06ab6d97d43919d9a2167befd338f2d28a8e8bb67d394b818a630093260f7872c808802674ca041faff7ca28173e4ed4a9d3dff44869c8f7508c75dff48546559f6d0c67d48fd5a5c0d854908e5d1e1f14603ed030785ac252033d7b4e881abd69638e5d6fddc844c8ee8050ad77e765c5485eac6e3e5c9260e6e3b5f3ef33e891fbc7000c10e95b0ae149b6873c493b3ca92dee101ccd7b9bb98") r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/183) r4 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x2, 0xfffffffffffffff9, 0x10002000000000, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00', 0x831a}) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r0, r4) [ 505.436325][T28164] validate_nla: 17 callbacks suppressed [ 505.436334][T28164] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:15 executing program 2: r0 = socket(0x1, 0x5, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3ff) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="e2656b72e9d7", 'teql0\x00'}}, 0x1e) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000001c0)=0x1) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44) fcntl$setlease(r0, 0x400, 0x1) write(r1, &(0x7f0000000040)="1f0000000000f30501000b00020423ca0200cf", 0x1bc8e57cec7f28fd) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) getsockname(r0, &(0x7f0000000380)=@tipc, &(0x7f0000000400)=0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x7, &(0x7f0000000240)='cpuset\x00', r3}, 0x30) 05:17:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x100000049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x21d3) 05:17:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, 0xffffffffffffffff) [ 505.596442][T28157] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 505.609386][T28164] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 505.617458][T28138] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 505.654030][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:17:15 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b070007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:15 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000140)="1f0000000104ff00fd4354c007110000f30501000800018bad82e41f7f90b8", 0xffffffffffffff76) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100), 0x4) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() r4 = dup3(r2, r0, 0x0) timer_create(0xfffffffffffffffe, &(0x7f0000000000)={0x0, 0x11, 0x0, @tid=r3}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) getpeername$netrom(r1, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002740)={@empty, @multicast1, 0x0}, &(0x7f0000002780)=0xc) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000340)) sendto$packet(r4, &(0x7f0000000300)="71910ddf2bb8c410aedc5e3b750ed4b2d5016d3a6dd11398fca74b76838b105d596ae2737e7fe717145afb8d4e", 0x2d, 0x80, &(0x7f00000027c0)={0x11, 0x17, r5, 0x1, 0x7, 0x6, @random="f652f3e6f66a"}, 0x14) tkill(r3, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x6, 0xfffffffffffffffe, 0x100000000, 0x0, 0x68}, &(0x7f0000000080)=0x98) delete_module(&(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0xa00) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000180)={0x11, 0x6, 0x1ff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) write$selinux_attr(r4, &(0x7f00000000c0)='system_u:object_r:apt_exec_t:s0\x00', 0x20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x2, 0x0, 0x0) 05:17:15 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) userfaultfd(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x228000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc081) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000280), &(0x7f00000003c0)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) truncate(0x0, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) 05:17:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x14000000) 05:17:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 505.905554][T28196] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 505.928230][ C1] net_ratelimit: 22 callbacks suppressed [ 505.928238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.931970][T28198] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 505.933955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.030459][T28209] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 506.052427][T28210] netlink: 'syz-executor2': attribute type 4 has an invalid length. 05:17:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x400000) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:16 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b080007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:16 executing program 2: r0 = socket(0x10, 0x2, 0xc) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x5, 0x101, 0x9}, 0x10) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@multicast2, 0x4e24, 0x4, 0x4e23, 0xfffffffffffffffc, 0x2, 0x80, 0x20, 0x2c, 0x0, r2}, {0x2, 0x81, 0x80, 0x2, 0x4265, 0x7, 0x9, 0x5}, {0x7, 0x80000001, 0x8}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}, {{@in=@multicast1, 0x4d3, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x2, 0x3, 0x4, 0x4, 0xffffffff, 0xff}}, 0xe8) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110000f30501000b000400020423ca0200cf", 0x1f) 05:17:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x19000080) [ 506.357086][T28228] netlink: 'syz-executor2': attribute type 4 has an invalid length. [ 506.363477][T28229] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x42) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 506.487041][T28242] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:16 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x91ffe) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f00000000c0)=0x1f) ioctl(r0, 0x80184132, &(0x7f0000001f64)) [ 506.568213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.574036][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:16 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b0a0007110000f30501000b000500020423ca0200cf", 0x1f) [ 507.048217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 507.054106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 507.368227][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 507.374065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 507.688212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.694010][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:17:18 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000200)='vet\x00\x00\x00\x00\x00\x00\x00\x00\x02\xbdh\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0x80000000}, &(0x7f0000000180)=0x8) 05:17:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x1}, 0x38) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)) umount2(&(0x7f0000000080)='./file0\x00', 0x8) 05:17:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1a000080) 05:17:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x5, 0x6, &(0x7f0000000000)=0x5}) ioctl$int_in(r2, 0x800000c0045002, &(0x7f0000000580)=0x100040000) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000380)={0x0, 0x9, 0x2, &(0x7f0000000340)=0x6}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r3, 0x9, &(0x7f0000000180)=[0x1e, 0x3, 0xe, 0x8, 0x2, 0x1, 0x85b, 0x6, 0x1], &(0x7f00000001c0)=[0xf276], 0x3, 0x7, 0x536c, &(0x7f0000000200)=[0xffffffff, 0x8000, 0x7, 0x1, 0xecf, 0x7f, 0x6], &(0x7f0000000240)=[0x6, 0x6, 0x1ff]}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000005c0)=0x14, 0xffffff53) 05:17:18 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b0e0007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f7ff6e87bb362083b") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:18 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b0f0007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:19 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/net\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$setregs(0xd, r3, 0x80e4, &(0x7f0000001300)="e77b311365c7c0954bdb25610060ae3f7c90cb222513eea251bcc0e614e543f72992fd1d5bb2639b5ff8a7a327917fd302eb28a44384b91b113cdaa48ce98e36ed84b7bf55f47f4fa06eae57f9093a301e32932787becb4d7f904f27e5050e9e36fa2a88a7736783dc8fec1dd4d452d1de4394d6f6a6968f4bdc40488607e395a5d9bb399667c001e6da2fe7fecf43b387b9e6f2d13715e191b476e902095bbb880f46a3cc3617b5fefb7779cc693cdede4e5b0827db526f459c49eab23e719f4b68d02cb575ac9cb13270bf0d78ac276c77ef0a47fdcf41f856e018074651b2f22795cfe3337b00d87bf396ece7bba74eb505403820271d2477d1f903c2688899dc3c626b04d03ecbbcd2361e60537fe666b887d5f79e646b45990678bdaf2d5a3750e0e6a2313f1387998e3ad383244b14305e9c720964b392e65e7ba091018ffcf297db3be37cad9521293d4aa84e54aaaf89529b1d3595eb0749a9861b8ba01a5ebfe41c1fa21af5c92552bf2709ee31ae559b0c8e8144ef22859a8eda8ea118ec0657ee6c80947d84ed19358100ab76e27ddce84832bb16d34c481b787424852f2ca1064216917e549ecc0cdfec1d5a1a1b69b563780fc2e2b60687f0116ded0aafef67818b0934b33ececa67f1526dab536e19bbcffc1f36f289f50cc9453ae924259519941fce8f930a06b4182bc4945b265ee065dc0cee61f8aa70d9d4b9bed9fc38a0c551e58901f1f4518d1f3b972a5568ec60ce53b20636683ded5c1e079716c8a49d123452829b2873ab69a67844997649bec7a1c0ebe1a1b7f6dc64895df322feeafbd9e346b9b46da0a8e25213a5bd5694d2ea3c53b6510c90c986be145012306810bb4d08a957c6971c6c3c84d3d3bf715edbdbde0b95b6519cec4f0a07ffa8ed7aec9349161961dd79cabc2f8a110a7ebd6f2211d6a86c6f84633538715b37e8a0696ecd56824b97a6b8acb7eb6c53c1a7e0a63aa3daab15e647e3c18fd0393f08fbdfb68b5859cf5401c3015685f6cc684a7d3946b1600ccb0da741ba2e1ba1aa2c0735c1cca893822c2dba5b3a77aa4996b7929d65c13c28716760913e14df605386bbca34894f272fc1e5b54ea8e5619bcf3c3f63949cf5f0674c9f02059e933e13bf7ee390aa654b284f95e5099df4f34d59c9edda66d2ff755b771577213aba38add39c4805ace1a5c17e1b3f2362cdd3e609223d067de445be1775fc2151a5215bb309d0f2f7810d930cef779baeaac1c6c5598420cf6d4d23260412d2f9f86a15b28fb90165cd4beb7c11635c7f614a0fe9a71af1d96c62986a6e8eb713de99605b7ff6c11933ec88d38f91cdd4a8b21753710eecb1057791d40a0f6eb77006f8f9cbe49a47949c7fce1d527d2f2a81794566e6fbe740081bf0c3068b4aed38966fc8b10b83ad8b83290360d6b87d794f513a40cd19b258cec09d5108299d34839f7c52de97428dd116f5b623a1430a8c43bb46f63c32dfb04c37dab11a14d99d06a755e60aa043d5665ad101bdca309cb58bacd6e44e704de5af7a296b8486575f7d06052a675a9cba577a532e281c305843751cbe6abba2fa1ee09108eccec5da5aaf5d41140e9b2704d6ca7504ab57c4f0f72c11ff19235bb18c89d0002c5dee3904eec748b1e69970c2d973bae44bb669869666ef2b3f0d7bfc5f3663a804c45748c2d32c7f0755c10261a250314fb16810bf47d7483c9b04f8a18821b05c6f19092a58ee894b64937c6e4a934f128eb01c8186969ea47e770bcd6ac2749793a74360c6a370932cfa41c3fa6cff0f3edb37366eb9e6fcdf60ec0140264acfd19dd1e785c669433b145ff8e8cfd8d75e4a9238267b041ca25034be1f81f996e49c8a9af800333636430343fc974d1f4f66b420f4b1e2fe0482fc7c2ec4fff2685e1e2f021209cb885c59c3c0221624bd21ba2e7692c8ecdacf36dba7b4e4e665e2939d4c805071f0a204412cd8280e286ef7a44da861ad9d2ca3690988c42a3b549a5c78394eae09654e817d1e5af64bc8a0d7ee3da428fb1092fc94ac67b7e8ff6f32780cb0a95a4d9e5e2c0949b226015ec6a718eb977c52e25406c3abe558825b0841546b552b129fa74b4ae776b5f43ad997a511b04f77667566b4a801a148b1824ed2811bb6e1d38b2fb4d25e3fae981dcc283cdb01bbb255a293cc5a8f349d50695a42b98c702ec0aaf33e9e40df8983ecfd573d4e4b831769efc8d2a343e4d9cdc3fad23af5ce64e9a1fb3ffcca9871db011b24f93dcf4d30342ebde7007138ce7f340b026459b4f9a713512da82c38e15be1ca69da658361f4a6b5a00fff52700464dfe191f3d81eb24127a2abd9cfcf2c309da8cb541e5606752eb67d540145917ec7086f2e6034392479b5e72b7fabe887345d848fb9050375ba7351cdcb3e48d95e807664c125b0dcbffb5d1c2e9d34aeabc83bdea74afbce240dd55f9fdab5b4129c531d5859b21b6fd54fae6c075a78c706b89c70a878a8d5b0b9e30221498cab201251da304b005f6b28de187179118f96b24109efd7b896b588706c494b2f929c041c54a5d4e37ec29ff4e428b297ddbe8511b6e25b4fadb84a0ae2717548bcd1cbb9cdaab9015682bfc46b706c68784946c238275d388ee6402a5e154c94481e3a00c9ba2f436d981f36e0f2b47c146cee6699db4476e5eeff90b1fe4b9f1ddfc8d34e523acc0500334826cd7521062f15501359184825c42c46d1cf036267e0ac0e50b6a326c4956b9d49b22790824a04eb5c25342c8dd8d4172e92b4b31090b7474fdc1b2833db2e7f445d0734b42eb7510b760a9741a18efb68aeeea59e4dcc7d0b7f720af692047aad483c63513f3fbd26e01ddd56c470ac27a55609822d543a198e026ef39e5090d13fc57188bbb20fe5869703e85fda5a572422226cdc35106d133889df97134e188434e3ace47f58231851b93b001ea736399407c3f05e2d5d00cad105a2f323a288832598333741208253bba39e3341123df1871e5a1dd2f1ecf9bb783c7f5df78651279504d18fa35d878ad2a2356fa03b346e08849aae108c19e3b7c577827caf5688ee6862df3d3d1a0c6f48e40d15eac7475bfcfd7a3ab4555745f05c9e21d3eb275ba4affa3e85e5600ec507a36bc8e73392e7a3b9e50339855936040df889737f1debf53aa94482d1c842db80f048c2e61546228f70bdb73139ed7a5ecb94df8b4e69a2ebd311f5a1c074e705bf3fc7036cc06ea0f1600597923eefef570f2d8a6706bc0e3f1d04bde2446b1bcf1a1924f2ff1f7335956257ff467b09f88bd2cdeba8badc5a69e15c96b4f7b329ce39477fff02d7b1d633c18f8bae8aaf90b25b0e7c8dced5d5a9a082be85f544eb142e46ab8411716b83b226cb7c4cb38c4f801ed09c27c1c9a58f7101adeba743b6e4c3992025357740054d72961a9853d2122c8e9651916bdcc79b01cf59f4f1f8125ab921308af63f708e2f0d507d82524091a2bf35a197ede33e851bbbb46d67334695a579b46ec852f92dfce7951f44fb9f804d3c94297a1f7359c6b60c4329915ee5be438de31188d1fc8a024e6569c9152b9635e98806dcf566334c2dcff6476cfa78f3a27737ba362b1130b8e6d0494e71accac6258d926f66561d820bc33d1a1f4e0cea5b45379810c4b079d64ece52a9502be93f2da4f88d42e3b8e731711bb825c55ccd73d8ef9a2fa4fc65328a87bfbd28b8cfb38a850037d530059a348962b6a65dd8449c3ed24f57340a5d9de9f8ba6998096f6c120126d370d5afbc5c53e10a3afa538427854fc56fdc2663c843f2443e87317c056b1acd542c5a96028abbf4525b3de1698e2571e17717904691fa41b2ddb2e20fc2711f8e6f0a709baf75b0229b536620bde312420695fd38182548d73bf89bf42f9d9d22c98e4d803a2f5dc9ae0c31e4ebdb426562cc17f9c0c5fc81a8ef81d0b609a0ec16adc5c513a6d0ea3ee04bcc5204551f19f652eb1cf5b77887d8457f3ece7df89f196230f12b91ce00abe7c874734ea7f58be028105af7516d2d0e797491b4f83bbd64147539c1e8a170669273ec0d7897727fdbbda3f9d6516f334cd6a0eee3c3699e4bf560ae89bd6645c975f08ee55d8f023b4670f6c4619526e1aaee1f714e2e4f9c096ceffffa606eb38d0b1f5f43a39a64172f3b731c56e9391e397893a924a663ca1aa41a7248c007b4f5c95d068869138f5991cafbfbbfa0ef846a5df6a55d3bcaa36cad3690d8ae8c0e24acddef284137d6367ac82bc567cda88b55f8ea5997583e5bbf1841460e8b4a35f0f5dcbadc168bc1c8a576a833b345d0345d7526d11bf04ff3c0197eb0dd0687233f563f6884484868d8221ed1e70db8c3864d3de89095a92541d9d2727c25649d3d9bb9e37e2dc0bb481f1f408f2a7f92d087e9c6e754e7da62f5fe0a0476df1a6205d290abab2249ef7d66ccc6bf1adc6fdede7a53b145710e0ba65f5e0758d5b30db710f7c026d41650d6ac1f93729aa99baa2189525b5209992e37a55a67f6c01c81f9ed34562f2c9f58fcf571c30690b4be5289dd8c09e6f5468469c335ddc533ab6620f3d373cefdcec03f8a26cff83b11cbca36b6690e973a92f047b874bb938f56f6343b751ca2a2dad45f7ff95b994c7b22411131cd4d524ab69318687b5bb39c899d7ce2f19447b128589e624b8cdf45970bde1d0686e036592527474beebbb8cc5ca32da5a2284122fd94f62db0f2eedd356be3bc3e42dcb5f950be588485550dd96ce51edcce010f19482e2b8a1bf413dbf66ec77a030b1bd190e25ee880a98ce3d590cae3c6b514a562f5c828cae6367c95612a3a49b9d11bdf33d3c1cafb6f0a29cd49538be42edb00f7ef163ea83b888e267ffd194a206e3a682589c3ba7c80a3c87f1713a2c85a53a3b32430f632ae1df7a09331cce802e95a790f907cf683b4dd781a411c2457a7f946647fa1c6cf7c90d913c643b0cd70845efa76583cc0fa17fe3579e4800fb806a30a3099c2e63336d58b552fe5f3bfc29df6fe64ab5eb42d87b68671832f27c18c22bf7eb72eb8ee2ab29cfba7f2b6a4eab49f6f9e28d5d919c526cfbac3831deda92a865c380ad9bd7d50b44f46aa72e655f129c514af330e81a51084404e48a9b11bde936999852764ea5a4c44093e0ae6663280d5a49ce46faeb650eb05ee5885ba9b9adcd695a94994a3bb9cc8a24c07904f2e7ee56d84480c31c78ade658011a95b9019306aa71cc5070992783d93a9fabcd6fb43d7459f3da875a0000bef0f50ab0e635b06be7e221719a774b5a886b4dca255f80c740660f78b02df59395789e32d3cf4c2e91e7aa0247d2d5b07fe747661eda393e1b0c0e6d62368191f091cffaa981204b12d6c1e3ee805782324041dcd191560d52e874aa1a8fa4f775b48874137689b22cd3bef35b90decf53888df718aa186ebf972db86cdc1afdffc8069a55592e3715357161673383eb17cff20ba97ae277c5f582514cf40050c33d0146bd6457c8061cb5ca49da8caa45c4ea47b104b8a196e1513b2eaa655cae92bfe3d5ef2aa22c5a607dc783351dc133d86f83e097b38d18ab6a15092f5523ef66e859a61a1acc624c12a174837ea0667b734fdfe4e47751ed42152c0a3c8af9e0e98cd6a0b5148aa597a05835ff36fb9dd8ee4f326ea843337bd7b9d3ddd736ceb5837b62247bec031136a35b21a0453f9ee57093e157502a87b24751d7145a6b0ffef142390fafae155118b8ea3e3c398804e61921bc4cf3578918bb99d541b36cceb10b5f407fa6f4d8a0373") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x20, 0x0) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) 05:17:19 executing program 2: gettid() clock_getres(0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000480)='./file0\x00') symlink(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x6, 0x101000) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000003ec0)='/dev/usbmon#\x00', 0x3, 0x80000) bind$inet(r0, 0x0, 0xffffffffffffffc7) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x402000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000380)={0x0, 0xfff}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) [ 509.156026][T28296] : renamed from vet 05:17:19 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x257) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000775000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r5 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={r7, 0x8}, &(0x7f0000000440)=0x3) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="ffff01000010e38e9482e454036d9add4b25e55a2cc0975b96a88705f2e3dd1dc644c7a83edb37dc0c7dfe481c5254ad7c024c3336d44997b4a5658f54d8e777733ca60221b6d2f7a20a64176823591b87fd554c09e23a2a4e689abe1638"], 0xa) r9 = dup2(r4, r6) ioctl$EVIOCGBITKEY(r9, 0x80404521, &(0x7f0000000000)=""/98) 05:17:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1d000080) 05:17:19 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x4, 0x4, {0xa, 0xfffffffffffffffd, 0x5, @mcast2, 0x2}}}, 0x80) r1 = socket$kcm(0x2, 0x2, 0x73) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x78, 0x32, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x110) 05:17:19 executing program 2: ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000140)={0x0, 0x8, 0x8001, &(0x7f0000000100)=0x5}) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/44, 0x2c, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x2, 0x5, 0x10000, 0x80000000}, 0x6) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0xc83, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="dec1cd3a2b0b5faa1aa8522203b0bb2b3409ad533496729cdfc02473877003bfd53c257f8d66867d890cbca9ca1abe9f0d9d6e031e8f253ac470f4aa2ca92f87747ba0bb9e7162935044220f7e1d027d03219feec44b187ae000a039f7e53e87c7f4a96066866b8d7399e77f371336aa0a7629c9f8a9f487078c4ae963a0df2237d92e9ab172bf9ddde7d15bc0f2957ec1e87b141e3fc26052e891bfda6772eee2e971c2011955408e297bb8846ad23a", 0xb0, 0x2}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xdd2, &(0x7f0000000740)="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") 05:17:19 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x4100) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000280)) sched_setaffinity(0x0, 0xdb, &(0x7f0000000180)=0x7f42) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000340)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000300)=r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = gettid() clone(0x20120000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000900)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000100)={0x2}) tkill(0x0, 0x1000000000016) tkill(r2, 0x1000000000016) rt_sigreturn() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, 0x0, &(0x7f0000000240)='9p\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="291cb8a5209a04fa056cf65e8919cf79c599f5e5f93e907329dd86814ee22c04c9dd019b539b5eba8fbf0cff230a7db387c53ccafb6380ca1011ac5bd97ca684f0f45990906b3c20225ab549ecdf339694b2201c0f8d769e1bfeffffff2c162a7e8552694f7bfffffb4580f3dbe4ae0b53b965799d6f7e27efd4851de9446ec39b693ea53a6ac1b05adb7d00000000000000000000000000"]) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) clock_gettime(0x200000000000000, &(0x7f00000015c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000013c0)=[{{&(0x7f00000003c0)=@vsock, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000000580)=""/193, 0xc1}], 0x2, 0x0, 0x0, 0x401}, 0x7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)=""/176, 0xb0}, {&(0x7f00000009c0)=""/137, 0x89}], 0x2, &(0x7f0000000a80)=""/88, 0x58, 0x200}, 0x8001}, {{&(0x7f0000000b00)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, {{&(0x7f0000000d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e00)=""/42, 0x2a}, {0x0}], 0x2, 0x0, 0x0, 0x10001}, 0xaf7}], 0x4, 0x0, &(0x7f0000001500)={r5, r6+10000000}) 05:17:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b100007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:19 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1f}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) 05:17:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x20000000) 05:17:19 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b480007110000f30501000b000500020423ca0200cf", 0x1f) [ 509.689278][T28351] XFS (loop2): Invalid superblock magic number 05:17:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1118c0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) unshare(0x400) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) 05:17:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000100000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000005080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000050c0)={0x0, 0x67, "6fd3eddb21bdcefd414e5fc2906d551081296b3b0355258a5630f85ffc142c7b6dec5b1372a30861a4a55f66517b98c4939099111a6712030726d0e261680bbaa6592d35b455c1f32eb694a22a4d670be3730fa04fad9562e5a6ec1a92c5e4b5c46f61ff4c8537"}, &(0x7f0000005140)=0x6f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000005180)={r1, @in6={{0xa, 0x4e22, 0x1, @remote, 0x1}}, 0x4, 0xe4, 0x0, 0x2, 0x6}, &(0x7f0000005240)=0x98) [ 509.866893][T28399] __nla_parse: 14 callbacks suppressed [ 509.866902][T28399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000)=0xd1d, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:19 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80200, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fc3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:17:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0xa33, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket(0x10, 0x20000000802, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) write(r3, &(0x7f0000000340)="1b0000001a0025f00018000480ed0500800000e0d45cffffffffff", 0x1b) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0xc92, 0x2) [ 510.014151][T28399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x7, 0xd48b, 0x100, 0x0, 0x1}, 0x2c) r2 = dup3(r1, r0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x400, 0x8}) 05:17:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80, 0x120fff) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x2d, 0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x54) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x6, 0x1, 0x81}}) dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) 05:17:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3f000000) 05:17:20 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b4c0007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getpid() request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = dup2(r2, r0) keyctl$setperm(0x5, 0x0, 0x202000) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x200, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x40000000000009) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x20, 0x1e4, 0xfffffffffffff801, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x100, 0x9607}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:17:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x20000000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x80000008, 0x0, 0x800, 0xdcd, 0x4}, {0x7, 0x3, 0x40, 0x9, 0x6}, {0x8000001b, 0xffffffffffff4b19, 0x200, 0x5, 0x1}]}) umount2(&(0x7f0000000100)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 05:17:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="487b74aa97659f8692a8db5a3f7784fc0b16259a9ee814dff80842df0b24e8e7a51263848347cc3cea1ea45bbdd4d0e9728cf9f18b2e666d9e04ed4c45ad706583311d2c2610bb7f1c8082a79acef910a7e8ab7e9f5b"]}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="000800000000000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000ff0700000000e40000000000000000000000000000000000"]) r1 = accept4(r0, &(0x7f00000003c0)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0x800) syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x210040) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xac, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0xfffffffffffffffd, @empty, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x31, @ipv4={[], [], @remote}, 0x7}, @in6={0xa, 0x4e23, 0x60000000000000, @mcast2, 0x40}, @in6={0xa, 0x4e21, 0x416f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x714}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x604e, @dev={0xfe, 0x80, [], 0xe}, 0x4}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x5, 0x30}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={r2, 0x80000001}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x5, 0x2, 0x68, 0x1000, 0x7, 0x8000, 0x95, 0xffffffff, 0x7, 0x1002, 0xffffffff, 0x100000001, 0x20, 0x3, 0x5]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r3, 0xfffffffb, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x100000001, @rand_addr="c09bdd4df764b62cb36e15b00b48a251", 0x8}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x3}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @loopback}, 0x7}, @in6={0xa, 0x4e24, 0xffffffff, @empty, 0x81}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x8001, @empty, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x308}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000000c0)=0x10) fcntl$setsig(r0, 0xa, 0x10) [ 510.345915][T28451] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:17:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setsig(r0, 0xa, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) accept$alg(r2, 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) dup2(r0, r2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000000)="542757492eedca54d39359003626bf0b0b2362b74b3b21b6340316545d0e60b96d0e64edd21a5e2619a3b923222b2fe0b0800cb6f7f73a02984ca383f1b519263344763a9e9e174be90c3b2944052b1c36570661d1e0a464ffb248b90a62982964c86dca55ec260ef17cf4a3420f71ce74ab36fafa9d58b9") [ 510.465239][T28451] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 510.465256][T28459] validate_nla: 10 callbacks suppressed [ 510.465264][T28459] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:20 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b600007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008000b0000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x140}}, 0x0) 05:17:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x40000000) 05:17:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r3) 05:17:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000024, &(0x7f0000000100)=ANY=[@ANYBLOB="ffe42aec9e28f247c9862b19c05420bc9cc4b4a57d4e3f7e5950c81359ca9db71dfd8c07033dbe7d7e11b729dcc98e07e2b9785571fa9729cb0eb93fe30fae7d128c6615390f46e3607b4cd022eb5708d700000000000a18d1579ffb76ba11112218c9b66db1000000"]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) [ 510.829979][T28492] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 510.839458][T28493] netlink: 80 bytes leftover after parsing attributes in process `syz-executor4'. 05:17:20 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x0, &(0x7f0000000000)) [ 510.894360][T28500] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:20 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000380)=""/207) add_key$keyring(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000480)=""/250, 0xfa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 510.972168][T28492] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 510.982093][T28500] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f00006bc000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x200, &(0x7f0000000040)=0x4) 05:17:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f0275123f3188a07002e34f21c985fba9607b08b62c5b053f02771c7b00a61246fbe004d9fc08f166") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) 05:17:21 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b680007110000f30501000b000500020423ca0200cf", 0x1f) [ 511.208944][ C1] net_ratelimit: 18 callbacks suppressed [ 511.208952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.220433][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:17:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x40000001) 05:17:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x1f, 0x9, 0x5, 0x0, 0x0, [{r0, 0x0, 0xc9}, {r0, 0x0, 0x9}, {r0, 0x0, 0x8}, {r0, 0x0, 0x5}, {r0, 0x0, 0x6}]}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") prctl$PR_SET_FPEXC(0xc, 0x1d0080) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x39, 0x6, [0x4, 0x1f, 0x8, 0x81, 0x8000, 0x1]}}) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6f73782e717565f7653001400000000000000000fffffffffffffff900000000000000001f000000000000001f00000000e5ffffff00"], &(0x7f0000000240)='/dev/snd/seq\x00', 0xd, 0x3) dup2(r0, r3) [ 511.312131][T28535] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 511.377688][T28541] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:21 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat ', 0x0, 0x5e, ['keyring.wlan1vboxnet0cgroup\x99\x00', '/dev/rtc#\x00']}, 0x200000c2) [ 511.475516][T28535] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 511.481512][T28498] EXT4-fs (sda1): Unrecognized mount option "*(GɆ+T Ĵ}N?~YPYʝ=}~)ɎxUq)?}f9F`{L"W" or missing value [ 511.488003][T28541] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4035, 0x20600) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000040)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000280)={r2, 0x1, 0x6}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r4) [ 511.528215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.534062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.540508][ T27] audit: type=1400 audit(1549171041.452:108): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=28549 comm="syz-executor4" 05:17:21 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = getpid() gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) [ 511.723651][T28558] EXT4-fs (sda1): Unrecognized mount option "*(GɆ+T Ĵ}N?~YPYʝ=}~)ɎxUq)?}f9F`{L"W" or missing value 05:17:21 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b6c0007110000f30501000b000500020423ca0200cf", 0x1f) [ 511.848327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.854145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.859997][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.865759][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:17:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000024, &(0x7f0000000100)=ANY=[@ANYBLOB="ffe42aec9e28f247c9862b19c05420bc9cc4b4a57d4e3f7e5950c81359ca9db71dfd8c07033dbe7d7e11b729dcc98e07e2b9785571fa9729cb0eb93fe30fae7d128c6615390f46e3607b4cd022eb5708d700000000000a18d1579ffb76ba11112218c9b66db1000000"]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) 05:17:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x8, 0x1}, {0x400, 0x8}], r3}, 0x18, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {0x0}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0) [ 512.056447][T28584] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 512.098064][T28589] EXT4-fs (sda1): Unrecognized mount option "*(GɆ+T Ĵ}N?~YPYʝ=}~)ɎxUq)?}f9F`{L"W" or missing value [ 512.175359][T28591] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 512.178214][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.189212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 512.266854][T28591] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:22 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cGroup.procs\x00\xa6\xed#\xd6\x1e\xff\a\x00\x00\x00\x00\x00\x00\x17T\xe3\x8c\x86[|\xd8\xf1\xc3S\xf1\xd8An\xc36\x7f`z\xe2\b!\r\xdc\xaa\xbd\xb1\xd6\xaf\x83\x12\x94\x13\xf1`i\x1a\x10\xa9\xb6\x95\x0f\x9a4T\x8b\xa6\xf8\x1c?\x8e\xf5\x06\x9c\xfe\x85\xdch:\b\xe34\xf9\x9fK4\xf4\x1c\x1c+\xa5\'\xcaA\x90\x1a\v\xbd\x025/-\x05v)\x03F\xfcf\xe8\x9d\x9b^U\xb5\xe9\xd4\xd6\xa3\xf4\x9a\xf2\x18\x10\x81\xe3\xd5:\r\xb1R\xa5\r\x02\xf8_\xe5\xacL%1W3\xb3\x85!\x16\x17\x9b\xa6\x19\xa7G', 0x2, 0x0) 05:17:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x9, 0xffffffffffffffdc}, 'port1\x00', 0x40, 0x1004, 0x102000000, 0xbc0, 0x7ff, 0x4, 0x4, 0x0, 0x7, 0x7}) 05:17:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x50000000) 05:17:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0, 0x7ff}, 0x48) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) bind$packet(r2, &(0x7f0000000480)={0x11, 0xff, r3, 0x1, 0x9, 0x6, @random="61af35d6b377"}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000706e000020008500000027000000"], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="d7dbb23bab31f7d84ff4dfb405fc", 0x0}, 0x28) 05:17:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b740007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_dev$admmidi(0x0, 0x6, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000007c0)={0x60, 0xfffffffffffffffe, 0x6, {{0x0, 0x1ff, 0x0, 0x0, 0x6, 0x3, 0x81, 0x100000000}}}, 0x60) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) r4 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xffff}, &(0x7f0000000280)=0x8) fsetxattr$security_ima(r5, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x3) acct(&(0x7f0000000140)='./file0\x00') ftruncate(r3, 0x8007ffc) sendfile(r1, r3, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)="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", 0x146}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(0xffffffffffffffff, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) read(0xffffffffffffffff, &(0x7f0000000000)=""/253, 0xfd) [ 512.525385][T28609] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 512.553033][T28613] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 2, id = 0 05:17:22 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b6c0007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800000000100ffe) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 512.624589][T28619] netlink: 'syz-executor0': attribute type 5 has an invalid length. 05:17:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800e2ffc169cab028c1e00000000000"], 0x14}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x40200, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) sendto$inet(r1, &(0x7f0000000240)="37f7701e197674b7191d7130afeeeb285a330959c1b90770a43f17a41fdec70b17bede1e912b870d14c21752a29ce820a8a59d9f5a14852c86f6638e13a070da9930f4fed899b752168c6edfd4c5abde7affcf0af0d46d62a1436812b00e2e4aa1eaf6ce7c26bf9dc7a6e0caef509610ee2db38d4b753bbdac8095acb1037d799f861b8d998b6444afd82930c5ebb7243ab614c8e31f58b71329eef723691ff43113be72603745b43901dd19f55de9845a0037a17e843d5049bd20", 0xbb, 0x80, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='user/,md5sum}\x00', 0xe) [ 512.701111][T28625] netlink: 'syz-executor2': attribute type 5 has an invalid length. [ 512.713997][T28605] Process accounting resumed 05:17:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b7a0007110000f30501000b000500020423ca0200cf", 0x1f) 05:17:22 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc1, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x101, 0x79c, 0x6, 0x13, r0, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xa, 0x5, 0x100000000000914, 0x6}, 0x2a) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x18) 05:17:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r2) [ 512.896308][T28605] Process accounting resumed 05:17:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x80000007) 05:17:22 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1b1000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000010}) pread64(r0, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) 05:17:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x802, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_dev$admmidi(0x0, 0x6, 0x40) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000007c0)={0x60, 0xfffffffffffffffe, 0x6, {{0x0, 0x1ff, 0x0, 0x0, 0x6, 0x3, 0x81, 0x100000000}}}, 0x60) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f0000000680)=""/113, 0x71, 0x1ff}, 0x8}], 0x1, 0x103, &(0x7f0000000780)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) r4 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xffff}, &(0x7f0000000280)=0x8) fsetxattr$security_ima(r5, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x3) acct(&(0x7f0000000140)='./file0\x00') ftruncate(r3, 0x8007ffc) sendfile(r1, r3, 0x0, 0x45a3) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)="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", 0x146}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(0xffffffffffffffff, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) read(0xffffffffffffffff, &(0x7f0000000000)=""/253, 0xfd) 05:17:23 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x125d, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2000, 0x101f02) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000000c0)={0x1, 0x82, 0x1}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r3 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @local}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, [], 0x2a}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0xfe, 0x4e22, 0xffffffffffffffec, 0x2, 0x20, 0x0, 0x8c, r4, r7}, {0x9, 0xe01, 0xc1, 0x40, 0xfffffffffffffffc, 0x7, 0x3, 0x3}, {0x1, 0x1, 0x2, 0x3}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5, 0x3b}, 0x2, @in=@multicast2, 0x0, 0x2, 0x3, 0x100000001, 0x7, 0x0, 0xffff}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x600}, @timestamp, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x10000}, @mss={0x2, 0x1}, @sack_perm, @timestamp], 0xa) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22020}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f0, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1d4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc0f7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x6, 0x32347047, 0x9, 0x3}, {0x1, 0x9, 0x5, 0x1ff}, {0x0, 0x8000, 0xe64, 0x100000000}, {0xff, 0x8a7, 0x7, 0x9}, {0xfffffffffffffff9, 0x1, 0x400, 0x9}, {0x5, 0x80, 0x7, 0xfffffffffffffff8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x1f0}}, 0x4000000) 05:17:23 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000307110000f30501000b000500020423ca0200cf", 0x1f) 05:17:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r4 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(r0, r4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 05:17:23 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000001140)=0x34a7776, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400100, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000200)={0x5, "7aa0d8074dcb23b2dd53b73160c2c642831adc8db4bdc3959cd9f66364677dec", 0x1, 0x1}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) r4 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) 05:17:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x80000008) 05:17:23 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123faa02aa02") r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x3cf, 0x4) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'que\xf7e0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\xe5\xff\xff\xff\x00'}) dup2(0xffffffffffffffff, r2) [ 513.395423][T28666] Process accounting resumed 05:17:23 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000507110000f30501000b000500020423ca0200cf", 0x1f) 05:17:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5c4800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x6, 0x20}, &(0x7f0000000240)=0xc) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000001400)=""/189) geteuid() [ 513.499576][ T17] WARNING: CPU: 1 PID: 17 at kernel/workqueue.c:3018 __flush_work+0x74c/0x8a0 [ 513.508747][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 513.515339][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.0.0-rc4-next-20190201 #25 [ 513.523917][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.534052][ T17] Workqueue: md_misc mddev_delayed_delete [ 513.540083][ T17] Call Trace: [ 513.543834][ T17] dump_stack+0x172/0x1f0 [ 513.543873][ T17] ? __flush_work+0x6e0/0x8a0 [ 513.543935][ T17] panic+0x2cb/0x65c [ 513.543950][ T17] ? __warn_printk+0xf3/0xf3 [ 513.543969][ T17] ? __flush_work+0x74c/0x8a0 [ 513.543983][ T17] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.543995][ T17] ? __warn.cold+0x5/0x45 [ 513.544008][ T17] ? __warn+0xe8/0x1d0 [ 513.544025][ T17] ? __flush_work+0x74c/0x8a0 [ 513.544036][ T17] __warn.cold+0x20/0x45 [ 513.544050][ T17] ? __flush_work+0x74c/0x8a0 [ 513.544064][ T17] report_bug+0x263/0x2b0 [ 513.544121][ T17] do_error_trap+0x11b/0x200 [ 513.544140][ T17] do_invalid_op+0x37/0x50 [ 513.544152][ T17] ? __flush_work+0x74c/0x8a0 [ 513.544167][ T17] invalid_op+0x14/0x20 [ 513.544180][ T17] RIP: 0010:__flush_work+0x74c/0x8a0 [ 513.544192][ T17] Code: 74 58 e8 47 b7 25 00 fb 66 0f 1f 44 00 00 45 31 e4 e9 86 fd ff ff e8 33 b7 25 00 0f 0b 45 31 e4 e9 77 fd ff ff e8 24 b7 25 00 <0f> 0b 45 31 e4 e9 68 fd ff ff e8 15 b7 25 00 4c 89 ff 45 31 e4 e8 [ 513.544200][ T17] RSP: 0018:ffff8880a98e79a0 EFLAGS: 00010293 [ 513.544211][ T17] RAX: ffff8880a98d8480 RBX: ffff8880a16cc4e8 RCX: ffffffff814a3dbb [ 513.544219][ T17] RDX: 0000000000000000 RSI: ffffffff814a446c RDI: 0000000000000001 [ 513.544238][ T17] RBP: ffff8880a98e7b10 R08: ffff8880a98d8480 R09: ffff8880a98d8d48 [ 513.544245][ T17] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 513.544253][ T17] R13: ffff8880a98e7ae8 R14: 0000000000000001 R15: 0000000000000001 [ 513.544273][ T17] ? __flush_work+0x9b/0x8a0 [ 513.544285][ T17] ? __flush_work+0x74c/0x8a0 [ 513.544305][ T17] ? insert_work+0x3a0/0x3a0 [ 513.544318][ T17] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 513.544333][ T17] ? debug_object_assert_init+0x17b/0x2f0 [ 513.544346][ T17] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 513.544360][ T17] ? lockdep_hardirqs_on+0x418/0x5d0 [ 513.544380][ T17] ? trace_hardirqs_on+0x67/0x230 [ 513.544396][ T17] ? try_to_del_timer_sync+0xc1/0x110 [ 513.544412][ T17] ? mark_held_locks+0xa4/0xf0 [ 513.544425][ T17] ? __cancel_work_timer+0xc4/0x520 [ 513.544438][ T17] ? __cancel_work_timer+0x1d3/0x520 [ 513.544449][ T17] ? cancel_work_sync+0x18/0x20 [ 513.544461][ T17] ? __cancel_work_timer+0x1d3/0x520 [ 513.544474][ T17] ? lockdep_hardirqs_on+0x418/0x5d0 [ 513.544487][ T17] ? trace_hardirqs_on+0x67/0x230 [ 513.544504][ T17] __cancel_work_timer+0x3bf/0x520 [ 513.544520][ T17] ? try_to_grab_pending+0x710/0x710 [ 513.544536][ T17] ? try_to_del_timer_sync+0xc1/0x110 [ 513.544548][ T17] ? detach_if_pending+0x4f0/0x4f0 [ 513.544559][ T17] ? lockdep_hardirqs_on+0x418/0x5d0 [ 513.544573][ T17] ? trace_hardirqs_on+0x67/0x230 [ 513.544591][ T17] cancel_work_sync+0x18/0x20 [ 513.544646][ T17] blk_sync_queue+0x33/0x190 [ 513.544659][ T17] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.544675][ T17] blk_cleanup_queue+0x100/0x200 [ 513.544688][ T17] md_free+0xcb/0x1b0 [ 513.544704][ T17] kobject_put.cold+0x28f/0x2ec [ 513.544718][ T17] mddev_delayed_delete+0x34/0x40 [ 513.544737][ T17] process_one_work+0x98e/0x1790 [ 513.544759][ T17] ? pwq_dec_nr_in_flight+0x320/0x320 [ 513.544770][ T17] ? lock_acquire+0x16f/0x3f0 [ 513.544793][ T17] worker_thread+0x98/0xe40 [ 513.544819][ T17] kthread+0x357/0x430 [ 513.544832][ T17] ? process_one_work+0x1790/0x1790 [ 513.544845][ T17] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 513.544860][ T17] ret_from_fork+0x3a/0x50 [ 513.546378][ T17] Kernel Offset: disabled [ 513.886564][ T17] Rebooting in 86400 seconds..